2026-04-13 08:48:48 -04:00
|
|
|
//! HTTP handlers for the content-addressed blob store.
|
|
|
|
|
//!
|
|
|
|
|
//! - `POST /api/blob` — session-authenticated. Raw body is the blob;
|
|
|
|
|
//! headers set mime/filename. Returns `{cid, size, mime}`.
|
|
|
|
|
//! - `GET /blob/<cid>?cap=<hex>&exp=<epoch>&peer=<pubkey>` — peer-facing.
|
|
|
|
|
//! Capability verified against the stored HMAC key; bytes streamed back.
|
|
|
|
|
|
|
|
|
|
use super::{build_response, ApiHandler};
|
|
|
|
|
use crate::blobs::BlobStore;
|
|
|
|
|
use anyhow::Result;
|
|
|
|
|
use hyper::{Body, HeaderMap, Response, StatusCode};
|
|
|
|
|
use std::sync::Arc;
|
|
|
|
|
|
|
|
|
|
impl ApiHandler {
|
|
|
|
|
pub(super) async fn handle_blob_upload(
|
|
|
|
|
store: &Arc<BlobStore>,
|
|
|
|
|
self_pubkey_hex: &str,
|
|
|
|
|
headers: &HeaderMap,
|
|
|
|
|
body: hyper::body::Bytes,
|
|
|
|
|
) -> Result<Response<Body>> {
|
|
|
|
|
let mime = headers
|
|
|
|
|
.get("x-blob-mime")
|
|
|
|
|
.and_then(|v| v.to_str().ok())
|
|
|
|
|
.unwrap_or("application/octet-stream")
|
|
|
|
|
.to_string();
|
|
|
|
|
let filename = headers
|
|
|
|
|
.get("x-blob-filename")
|
|
|
|
|
.and_then(|v| v.to_str().ok())
|
|
|
|
|
.map(|s| s.to_string());
|
|
|
|
|
|
|
|
|
|
let bytes = body.to_vec();
|
|
|
|
|
match store.put(&bytes, &mime, filename, None).await {
|
|
|
|
|
Ok(meta) => {
|
|
|
|
|
// Include a self-signed capability URL so the UI can round-trip
|
|
|
|
|
// the upload end-to-end without any peer. 7-day expiry.
|
chore(ci): rustfmt + clippy clean-up to unblock the Rust CI job
The .github/workflows/ci.yml Rust job runs cargo fmt --check, clippy
with -D warnings, and tests. All three were failing. This commit:
- Applies rustfmt across the tree (the bulk of the diff — untouched
since the last toolchain bump, so a wide sweep was unavoidable).
- Fixes the correctness-level clippy errors:
container/bitcoin_simulator.rs wildcard-in-or-pattern
container/manifest.rs from_str rename to parse (reserved name)
container/podman_client.rs .get(0) -> .first()
container/runtime.rs manual += collapse
archipelago/src/constants.rs doc-comment → module-doc
api/rpc/package/install.rs stray /// comment above a non-item
container/docker_packages.rs redundant field init
streaming/advertisement.rs missing Metric import in tests
tests/orchestration_tests.rs `vec!` in non-Vec contexts
mesh/listener/dispatch.rs unused store_plain_message import
api/rpc/tor/mod.rs and mesh/steganography.rs: push-after-new → vec!
- Quiets wide legacy surfaces with crate-level allows in main.rs for
stylistic lints (too_many_arguments, type_complexity, doc indent,
enum variant prefix, wildcard-in-or, assertions-on-constants,
drop_non_drop, unused_io_amount, ptr_arg) — these fired in dozens
of places with no correctness payoff and have been churning every
toolchain bump.
- Tags intentional-dead-code helpers: wallet/ and streaming/ modules
are WIP, mesh::send_chunked_payload and DM_V1_MARKER are kept for
rollback compatibility, vpn::get_nostr_vpn_status is surface-area
for a not-yet-landed RPC.
cargo fmt --check, cargo clippy --all-targets --all-features
-- -D warnings, and cargo test --all-features now all pass locally.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-18 17:23:46 -04:00
|
|
|
let exp =
|
|
|
|
|
(chrono::Utc::now().timestamp() as u64) + crate::blobs::DEFAULT_CAP_TTL_SECS;
|
2026-04-13 08:48:48 -04:00
|
|
|
let cap = store.issue_capability(&meta.cid, self_pubkey_hex, exp);
|
|
|
|
|
let self_test_url = format!(
|
|
|
|
|
"/blob/{}?cap={}&exp={}&peer={}",
|
|
|
|
|
meta.cid, cap, exp, self_pubkey_hex
|
|
|
|
|
);
|
|
|
|
|
let resp = serde_json::json!({
|
|
|
|
|
"cid": meta.cid,
|
|
|
|
|
"size": meta.size,
|
|
|
|
|
"mime": meta.mime,
|
|
|
|
|
"filename": meta.filename,
|
|
|
|
|
"self_test_url": self_test_url,
|
|
|
|
|
});
|
|
|
|
|
Ok(build_response(
|
|
|
|
|
StatusCode::OK,
|
|
|
|
|
"application/json",
|
|
|
|
|
Body::from(serde_json::to_vec(&resp).unwrap_or_default()),
|
|
|
|
|
))
|
|
|
|
|
}
|
|
|
|
|
Err(e) => Ok(build_response(
|
|
|
|
|
StatusCode::BAD_REQUEST,
|
|
|
|
|
"text/plain",
|
|
|
|
|
Body::from(format!("blob upload failed: {}", e)),
|
|
|
|
|
)),
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2026-04-13 12:58:03 -04:00
|
|
|
/// Share-to-mesh iframe intent. Mirrors `handle_blob_upload` but adds
|
|
|
|
|
/// CORS headers for the requesting app origin and returns a small JSON
|
|
|
|
|
/// payload the app forwards to its parent via postMessage:
|
|
|
|
|
/// `{ type: "share-to-mesh", cid, size, mime, filename }`.
|
|
|
|
|
pub(super) async fn handle_share_to_mesh(
|
|
|
|
|
store: &Arc<BlobStore>,
|
|
|
|
|
self_pubkey_hex: &str,
|
|
|
|
|
headers: &HeaderMap,
|
|
|
|
|
body: hyper::body::Bytes,
|
|
|
|
|
origin: &str,
|
|
|
|
|
) -> Result<Response<Body>> {
|
|
|
|
|
let mime = headers
|
|
|
|
|
.get("x-blob-mime")
|
|
|
|
|
.and_then(|v| v.to_str().ok())
|
|
|
|
|
.unwrap_or("application/octet-stream")
|
|
|
|
|
.to_string();
|
|
|
|
|
let filename = headers
|
|
|
|
|
.get("x-blob-filename")
|
|
|
|
|
.and_then(|v| v.to_str().ok())
|
|
|
|
|
.map(|s| s.to_string());
|
|
|
|
|
|
|
|
|
|
let bytes = body.to_vec();
|
|
|
|
|
let meta = match store.put(&bytes, &mime, filename, None).await {
|
|
|
|
|
Ok(m) => m,
|
|
|
|
|
Err(e) => {
|
|
|
|
|
return Ok(build_response(
|
|
|
|
|
StatusCode::BAD_REQUEST,
|
|
|
|
|
"text/plain",
|
|
|
|
|
Body::from(format!("share-to-mesh failed: {}", e)),
|
|
|
|
|
));
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
// Self-signed capability so the app can preview/download its own
|
|
|
|
|
// upload before the user has picked a peer.
|
|
|
|
|
let exp = (chrono::Utc::now().timestamp() as u64) + crate::blobs::DEFAULT_CAP_TTL_SECS;
|
|
|
|
|
let cap = store.issue_capability(&meta.cid, self_pubkey_hex, exp);
|
|
|
|
|
let self_url = format!(
|
|
|
|
|
"/blob/{}?cap={}&exp={}&peer={}",
|
|
|
|
|
meta.cid, cap, exp, self_pubkey_hex
|
|
|
|
|
);
|
|
|
|
|
let resp = serde_json::json!({
|
|
|
|
|
"type": "share-to-mesh",
|
|
|
|
|
"cid": meta.cid,
|
|
|
|
|
"size": meta.size,
|
|
|
|
|
"mime": meta.mime,
|
|
|
|
|
"filename": meta.filename,
|
|
|
|
|
"self_url": self_url,
|
|
|
|
|
});
|
|
|
|
|
let body_vec = serde_json::to_vec(&resp).unwrap_or_default();
|
|
|
|
|
Ok(Response::builder()
|
|
|
|
|
.status(StatusCode::OK)
|
|
|
|
|
.header("Content-Type", "application/json")
|
|
|
|
|
.header("Access-Control-Allow-Origin", origin)
|
|
|
|
|
.header("Access-Control-Allow-Credentials", "true")
|
|
|
|
|
.header("Vary", "Origin")
|
|
|
|
|
.body(Body::from(body_vec))
|
|
|
|
|
.unwrap_or_else(|_| Response::new(Body::from("internal error"))))
|
|
|
|
|
}
|
|
|
|
|
|
2026-04-13 08:48:48 -04:00
|
|
|
pub(super) async fn handle_blob_download(
|
|
|
|
|
store: &Arc<BlobStore>,
|
|
|
|
|
path: &str,
|
|
|
|
|
query: &str,
|
|
|
|
|
) -> Result<Response<Body>> {
|
|
|
|
|
let cid = path.strip_prefix("/blob/").unwrap_or("");
|
|
|
|
|
if cid.is_empty() || !cid.chars().all(|c| c.is_ascii_hexdigit()) || cid.len() != 64 {
|
|
|
|
|
return Ok(build_response(
|
|
|
|
|
StatusCode::BAD_REQUEST,
|
|
|
|
|
"text/plain",
|
|
|
|
|
Body::from("invalid cid"),
|
|
|
|
|
));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Parse query params: cap, exp, peer (all required)
|
|
|
|
|
let mut cap = None;
|
|
|
|
|
let mut exp: Option<u64> = None;
|
|
|
|
|
let mut peer = None;
|
|
|
|
|
for pair in query.split('&') {
|
|
|
|
|
let mut it = pair.splitn(2, '=');
|
|
|
|
|
match (it.next(), it.next()) {
|
|
|
|
|
(Some("cap"), Some(v)) => cap = Some(v.to_string()),
|
|
|
|
|
(Some("exp"), Some(v)) => exp = v.parse().ok(),
|
|
|
|
|
(Some("peer"), Some(v)) => peer = Some(v.to_string()),
|
|
|
|
|
_ => {}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
let (Some(cap), Some(exp), Some(peer)) = (cap, exp, peer) else {
|
|
|
|
|
return Ok(build_response(
|
|
|
|
|
StatusCode::UNAUTHORIZED,
|
|
|
|
|
"text/plain",
|
|
|
|
|
Body::from("missing cap/exp/peer"),
|
|
|
|
|
));
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
if let Err(e) = store.verify_capability(cid, &peer, exp, &cap) {
|
|
|
|
|
tracing::warn!("blob cap rejected: cid={} peer={} reason={}", cid, peer, e);
|
|
|
|
|
return Ok(build_response(
|
|
|
|
|
StatusCode::FORBIDDEN,
|
|
|
|
|
"text/plain",
|
|
|
|
|
Body::from(format!("capability rejected: {}", e)),
|
|
|
|
|
));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
let bytes = match store.get(cid).await {
|
|
|
|
|
Ok(b) => b,
|
|
|
|
|
Err(_) => {
|
|
|
|
|
return Ok(build_response(
|
|
|
|
|
StatusCode::NOT_FOUND,
|
|
|
|
|
"text/plain",
|
|
|
|
|
Body::from("blob not found"),
|
|
|
|
|
))
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
let mime = store
|
|
|
|
|
.meta(cid)
|
|
|
|
|
.await
|
|
|
|
|
.map(|m| m.mime)
|
|
|
|
|
.unwrap_or_else(|_| "application/octet-stream".to_string());
|
|
|
|
|
Ok(build_response(StatusCode::OK, &mime, Body::from(bytes)))
|
|
|
|
|
}
|
|
|
|
|
}
|