RocketChat/Rocket.Chat

import { LivechatVisitors, LivechatRooms } from '@rocket.chat/models';
import filesize from 'filesize';

import { API } from '../../../../api/server';
import { getUploadFormData } from '../../../../api/server/lib/getUploadFormData';
import { FileUpload } from '../../../../file-upload/server';
import { settings } from '../../../../settings/server';
import { fileUploadIsValidContentType } from '../../../../utils/server/restrictions';
import { sendFileLivechatMessage } from '../../../server/methods/sendFileLivechatMessage';

API.v1.addRoute('livechat/upload/:rid', {
    async post() {
        if (!this.request.headers['x-visitor-token']) {
            return API.v1.unauthorized();
        }

        const canUpload = settings.get<boolean>('Livechat_fileupload_enabled') && settings.get<boolean>('FileUpload_Enabled');

        if (!canUpload) {
            return API.v1.failure({
                reason: 'error-file-upload-disabled',
            });
        }

        const visitorToken = this.request.headers['x-visitor-token'];
        const visitor = await LivechatVisitors.getVisitorByToken(visitorToken as string, {});

        if (!visitor) {
            return API.v1.unauthorized();
        }

        const room = await LivechatRooms.findOneOpenByRoomIdAndVisitorToken(this.urlParams.rid, visitorToken as string);
        if (!room) {
            return API.v1.unauthorized();
        }

        const maxFileSize = settings.get<number>('FileUpload_MaxFileSize') || 104857600;

        const file = await getUploadFormData(
            {
                request: this.request,
            },
            { field: 'file', sizeLimit: maxFileSize },
        );

        const { fields, fileBuffer, filename, mimetype } = file;

        if (!fileUploadIsValidContentType(mimetype)) {
            return API.v1.failure({
                reason: 'error-type-not-allowed',
            });
        }

        const buffLength = fileBuffer.length;

        // -1 maxFileSize means there is no limit
        if (maxFileSize > -1 && buffLength > maxFileSize) {
            return API.v1.failure({
                reason: 'error-size-not-allowed',
                sizeAllowed: filesize(maxFileSize),
            });
        }

        const fileStore = FileUpload.getStore('Uploads');

        const details = {
            name: filename,
            size: buffLength,
            type: mimetype,
            rid: this.urlParams.rid,
            visitorToken,
        };

        const uploadedFile = await fileStore.insert(details, fileBuffer);
        if (!uploadedFile) {
            return API.v1.failure('Invalid file');
        }

        uploadedFile.description = fields.description;

        delete fields.description;
        return API.v1.success(await sendFileLivechatMessage({ roomId: this.urlParams.rid, visitorToken, file: uploadedFile, msgData: fields }));
    },
});