|
@@ -12,7 +12,7 @@ from urllib import parse
|
|
|
# from PIL import Image
|
|
|
from models import *
|
|
|
from utils import *
|
|
|
-
|
|
|
+from common.security import valid_access_token,valid_access_token_role
|
|
|
import requests
|
|
|
import hashlib
|
|
|
import random
|
|
@@ -31,7 +31,7 @@ UPLOAD_mergefile_PATH = '/data/upload/mergefile/'
|
|
|
async def upload_img(
|
|
|
request: Request,
|
|
|
file: UploadFile = File(...),
|
|
|
- db: Session = Depends(get_db)
|
|
|
+ db: Session = Depends(get_db), dependencies=Depends(valid_access_token_role)
|
|
|
):
|
|
|
file_name = file.filename
|
|
|
|
|
@@ -91,7 +91,7 @@ async def get_poster_by_id(
|
|
|
async def upload_big_file( request: Request,
|
|
|
file: UploadFile = File(...),
|
|
|
chunknumber: str = Query(''),
|
|
|
- identifier: str = Query('')): # 分片上传文件【用唯一标志符+分片序号】作为文件名
|
|
|
+ identifier: str = Query(''), dependencies=Depends(valid_access_token_role)): # 分片上传文件【用唯一标志符+分片序号】作为文件名
|
|
|
if not file:
|
|
|
raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="文件字段缺失")
|
|
|
if len(chunknumber) == 0 or len(identifier) == 0:
|
|
@@ -116,7 +116,7 @@ async def upload_big_file( request: Request,
|
|
|
@router.post("/upload/mergefile")
|
|
|
async def mergefile(identifier: str = Query(''),
|
|
|
filename: str = Query(''),
|
|
|
- chunkstar: int = Query(0)): # 根据唯一标识符合并文件
|
|
|
+ chunkstar: int = Query(0), dependencies=[Depends(valid_access_token_role)]): # 根据唯一标识符合并文件
|
|
|
if len(filename) == 0 or len(identifier) == 0:
|
|
|
return {"eroor": "没有传递相关参数"}
|
|
|
suffix = os.path.splitext(filename)[-1]
|
|
@@ -155,7 +155,7 @@ async def mergefile(identifier: str = Query(''),
|
|
|
|
|
|
|
|
|
@router.get("/download/{filename}")
|
|
|
-async def download_file(filename: str,filenameDesc: str = None):
|
|
|
+async def download_file(filename: str,filenameDesc: str = None, dependencies=[Depends(valid_access_token_role)]):
|
|
|
"""
|
|
|
根据提供的文件名下载文件。
|
|
|
:param filename: 要下载的文件的名称。
|