renun/zfile
1
0
Fork 0
mirror of https://github.com/zfile-dev/zfile.git synced 2025-04-19 05:34:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

✨ 限制直链不允许下载密码文件

Browse Source
This commit is contained in:
zhaojun1998
2021-01-23 13:42:53 +08:00
parent 4e184936db
commit ed32b9f1d4
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/main/java/im/zhaojun/zfile/controller/home/DirectLinkController.java
View File

@@ -1,7 +1,9 @@
package im.zhaojun.zfile.controller.home;
import cn.hutool.core.io.FileUtil;
import cn.hutool.core.util.URLUtil;
import im.zhaojun.zfile.context.DriveContext;
import im.zhaojun.zfile.exception.NotAllowedDownloadException;
import im.zhaojun.zfile.model.constant.ZFileConstant;
import im.zhaojun.zfile.model.dto.FileItemDTO;
import im.zhaojun.zfile.model.enums.FileTypeEnum;
@@ -17,6 +19,7 @@ import javax.servlet.http.HttpServletRequest;
import java.util.Objects;
/**
* 直链 Controller
* @author Zhao Jun
*/
@Controller
@@ -33,7 +36,8 @@ public class DirectLinkController {
* @return 重定向至文件直链
*/
@GetMapping("/directlink/{driveId}/**")
public String directlink(@PathVariable("driveId") Integer driveId, final HttpServletRequest request) {
public String directlink(@PathVariable("driveId") Integer driveId,
final HttpServletRequest request) {
String path = (String) request.getAttribute(
HandlerMapping.PATH_WITHIN_HANDLER_MAPPING_ATTRIBUTE);
String bestMatchPattern = (String) request.getAttribute(HandlerMapping.BEST_MATCHING_PATTERN_ATTRIBUTE);
@@ -44,6 +48,10 @@ public class DirectLinkController {
filePath = "/" + filePath;
}
if (Objects.equals(FileUtil.getName(filePath), ZFileConstant.PASSWORD_FILE_NAME)) {
throw new NotAllowedDownloadException("不允许下载此文件");
}
AbstractBaseFileService fileService = driveContext.get(driveId);
FileItemDTO fileItem = fileService.getFileItem(filePath);