98 lines
3.0 KiB
PHP
98 lines
3.0 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Models\Share;
|
|
use App\Models\ShareFile;
|
|
use App\Services\FileEncryptionService;
|
|
use App\Services\ShareService;
|
|
use Illuminate\Support\Facades\Storage;
|
|
use Symfony\Component\HttpFoundation\StreamedResponse;
|
|
use ZipStream\ZipStream;
|
|
|
|
class DownloadController extends Controller
|
|
{
|
|
public function __construct(
|
|
private FileEncryptionService $encryptionService,
|
|
private ShareService $shareService,
|
|
) {}
|
|
|
|
/**
|
|
* Download all files as a ZIP archive.
|
|
*/
|
|
public function download(Share $share): StreamedResponse
|
|
{
|
|
abort_if($share->isExpired() || $share->hasReachedDownloadLimit(), 404);
|
|
|
|
$share->load('files');
|
|
$key = $this->resolveDecryptionKey($share);
|
|
|
|
$this->shareService->recordDownload($share);
|
|
|
|
return new StreamedResponse(function () use ($share, $key): void {
|
|
$zip = new ZipStream(
|
|
outputName: 'share-'.$share->token.'.zip',
|
|
sendHttpHeaders: false,
|
|
);
|
|
|
|
foreach ($share->files as $file) {
|
|
$encryptedPath = Storage::disk('shares')->path($share->token.'/'.basename($file->stored_path));
|
|
$callback = $this->encryptionService->decryptFileToCallback($encryptedPath, $key);
|
|
|
|
$filename = $file->relative_path ?: $file->original_name;
|
|
$filename = str_replace('\\', '/', $filename);
|
|
|
|
if (str_starts_with($filename, '/') || str_contains($filename, '..')) {
|
|
$filename = basename($filename);
|
|
}
|
|
|
|
$zip->addFileFromCallback(fileName: $filename, callback: $callback, exactSize: $file->file_size);
|
|
}
|
|
|
|
$zip->finish();
|
|
}, 200, [
|
|
'Content-Type' => 'application/zip',
|
|
'Content-Disposition' => 'attachment; filename="share-'.$share->token.'.zip"',
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Download a single file.
|
|
*/
|
|
public function downloadFile(Share $share, ShareFile $shareFile): StreamedResponse
|
|
{
|
|
abort_if($share->isExpired() || $share->hasReachedDownloadLimit(), 404);
|
|
abort_if($shareFile->share_id !== $share->id, 404);
|
|
|
|
$key = $this->resolveDecryptionKey($share);
|
|
|
|
$this->shareService->recordDownload($share);
|
|
|
|
$encryptedPath = Storage::disk('shares')->path($share->token.'/'.basename($shareFile->stored_path));
|
|
|
|
return $this->encryptionService->decryptFileStream(
|
|
$encryptedPath,
|
|
$key,
|
|
$shareFile->original_name,
|
|
$shareFile->mime_type ?? 'application/octet-stream',
|
|
$shareFile->file_size,
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Resolve the decryption key from session or share.
|
|
*/
|
|
private function resolveDecryptionKey(Share $share): string
|
|
{
|
|
if ($share->isPasswordProtected()) {
|
|
$key = session('share_key_'.$share->token);
|
|
|
|
abort_if(! $key, 403, 'Password required');
|
|
|
|
return $key;
|
|
}
|
|
|
|
return $this->shareService->getDecryptionKey($share);
|
|
}
|
|
}
|