]> BookStack Code Mirror - bookstack/blob - app/Http/Controllers/ImageController.php
Added ability to secure images behind auth
[bookstack] / app / Http / Controllers / ImageController.php
1 <?php namespace BookStack\Http\Controllers;
2
3 use BookStack\Exceptions\ImageUploadException;
4 use BookStack\Exceptions\NotFoundException;
5 use BookStack\Repos\EntityRepo;
6 use BookStack\Repos\ImageRepo;
7 use Illuminate\Filesystem\Filesystem as File;
8 use Illuminate\Http\Request;
9 use BookStack\Image;
10 use BookStack\Repos\PageRepo;
11
12 class ImageController extends Controller
13 {
14     protected $image;
15     protected $file;
16     protected $imageRepo;
17
18     /**
19      * ImageController constructor.
20      * @param Image $image
21      * @param File $file
22      * @param ImageRepo $imageRepo
23      */
24     public function __construct(Image $image, File $file, ImageRepo $imageRepo)
25     {
26         $this->image = $image;
27         $this->file = $file;
28         $this->imageRepo = $imageRepo;
29         parent::__construct();
30     }
31
32     /**
33      * Provide an image file from storage.
34      * @param string $path
35      * @return mixed
36      */
37     public function showImage(string $path)
38     {
39         $path = storage_path('uploads/images/' . $path);
40         if (!file_exists($path)) {
41             abort(404);
42         }
43
44         return response()->file($path);
45     }
46
47     /**
48      * Get all images for a specific type, Paginated
49      * @param string $type
50      * @param int $page
51      * @return \Illuminate\Http\JsonResponse
52      */
53     public function getAllByType($type, $page = 0)
54     {
55         $imgData = $this->imageRepo->getPaginatedByType($type, $page);
56         return response()->json($imgData);
57     }
58
59     /**
60      * Search through images within a particular type.
61      * @param $type
62      * @param int $page
63      * @param Request $request
64      * @return mixed
65      */
66     public function searchByType($type, $page = 0, Request $request)
67     {
68         $this->validate($request, [
69             'term' => 'required|string'
70         ]);
71
72         $searchTerm = $request->get('term');
73         $imgData = $this->imageRepo->searchPaginatedByType($type, $page, 24, $searchTerm);
74         return response()->json($imgData);
75     }
76
77     /**
78      * Get all images for a user.
79      * @param int $page
80      * @return \Illuminate\Http\JsonResponse
81      */
82     public function getAllForUserType($page = 0)
83     {
84         $imgData = $this->imageRepo->getPaginatedByType('user', $page, 24, $this->currentUser->id);
85         return response()->json($imgData);
86     }
87
88     /**
89      * Get gallery images with a specific filter such as book or page
90      * @param $filter
91      * @param int $page
92      * @param Request $request
93      * @return \Illuminate\Contracts\Routing\ResponseFactory|\Illuminate\Http\JsonResponse|\Symfony\Component\HttpFoundation\Response
94      */
95     public function getGalleryFiltered($filter, $page = 0, Request $request)
96     {
97         $this->validate($request, [
98             'page_id' => 'required|integer'
99         ]);
100
101         $validFilters = collect(['page', 'book']);
102         if (!$validFilters->contains($filter)) return response('Invalid filter', 500);
103
104         $pageId = $request->get('page_id');
105         $imgData = $this->imageRepo->getGalleryFiltered($page, 24, strtolower($filter), $pageId);
106
107         return response()->json($imgData);
108     }
109
110     /**
111      * Handles image uploads for use on pages.
112      * @param string $type
113      * @param Request $request
114      * @return \Illuminate\Http\JsonResponse
115      */
116     public function uploadByType($type, Request $request)
117     {
118         $this->checkPermission('image-create-all');
119         $this->validate($request, [
120             'file' => 'is_image'
121         ]);
122
123         $imageUpload = $request->file('file');
124
125         try {
126             $uploadedTo = $request->filled('uploaded_to') ? $request->get('uploaded_to') : 0;
127             $image = $this->imageRepo->saveNew($imageUpload, $type, $uploadedTo);
128         } catch (ImageUploadException $e) {
129             return response($e->getMessage(), 500);
130         }
131
132         return response()->json($image);
133     }
134
135     /**
136      * Generate a sized thumbnail for an image.
137      * @param $id
138      * @param $width
139      * @param $height
140      * @param $crop
141      * @return \Illuminate\Http\JsonResponse
142      */
143     public function getThumbnail($id, $width, $height, $crop)
144     {
145         $this->checkPermission('image-create-all');
146         $image = $this->imageRepo->getById($id);
147         $thumbnailUrl = $this->imageRepo->getThumbnail($image, $width, $height, $crop == 'false');
148         return response()->json(['url' => $thumbnailUrl]);
149     }
150
151     /**
152      * Update image details
153      * @param integer $imageId
154      * @param Request $request
155      * @return \Illuminate\Http\JsonResponse
156      */
157     public function update($imageId, Request $request)
158     {
159         $this->validate($request, [
160             'name' => 'required|min:2|string'
161         ]);
162         $image = $this->imageRepo->getById($imageId);
163         $this->checkOwnablePermission('image-update', $image);
164         $image = $this->imageRepo->updateImageDetails($image, $request->all());
165         return response()->json($image);
166     }
167
168     /**
169      * Deletes an image and all thumbnail/image files
170      * @param EntityRepo $entityRepo
171      * @param Request $request
172      * @param int $id
173      * @return \Illuminate\Http\JsonResponse
174      */
175     public function destroy(EntityRepo $entityRepo, Request $request, $id)
176     {
177         $image = $this->imageRepo->getById($id);
178         $this->checkOwnablePermission('image-delete', $image);
179
180         // Check if this image is used on any pages
181         $isForced = in_array($request->get('force', ''), [true, 'true']);
182         if (!$isForced) {
183             $pageSearch = $entityRepo->searchForImage($image->url);
184             if ($pageSearch !== false) {
185                 return response()->json($pageSearch, 400);
186             }
187         }
188
189         $this->imageRepo->destroyImage($image);
190         return response()->json(trans('components.images_deleted'));
191     }
192
193
194 }