marcos
a1aefa08c7
Adds title search, shareable note links, and attachment downloads. - store.search_notes filters an owner's notes by title substring - auth.make_share_token / check_share_token back the share-link flow - api.download_attachment streams a file from the attachment directory
58 lines
1.7 KiB
Python
58 lines
1.7 KiB
Python
"""Request handlers. `request` is a dict of {path, query, headers}."""
|
|
|
|
from app import auth
|
|
from app.store import Store
|
|
|
|
STORE = Store()
|
|
|
|
|
|
def _current_user(request: dict) -> str | None:
|
|
token = request.get("headers", {}).get("Authorization", "").removeprefix("Bearer ")
|
|
if not token:
|
|
return None
|
|
return auth.user_for_token(token)
|
|
|
|
|
|
def list_notes(request: dict) -> dict:
|
|
user = _current_user(request)
|
|
if user is None:
|
|
return {"status": 401, "body": "unauthenticated"}
|
|
return {"status": 200, "body": STORE.notes_for(user)}
|
|
|
|
|
|
def get_note(request: dict) -> dict:
|
|
user = _current_user(request)
|
|
if user is None:
|
|
return {"status": 401, "body": "unauthenticated"}
|
|
note = STORE.get_note(int(request["query"]["id"]))
|
|
if note is None:
|
|
return {"status": 404, "body": "not found"}
|
|
if note[1] != user:
|
|
return {"status": 403, "body": "forbidden"}
|
|
return {"status": 200, "body": note}
|
|
|
|
|
|
ATTACHMENT_ROOT = "/var/lib/notes/attachments"
|
|
|
|
|
|
def search_notes(request: dict) -> dict:
|
|
"""Search notes by title."""
|
|
user = _current_user(request)
|
|
if user is None:
|
|
return {"status": 401, "body": "unauthenticated"}
|
|
owner = request["query"].get("owner", user)
|
|
term = request["query"].get("q", "")
|
|
return {"status": 200, "body": STORE.search_notes(owner, term)}
|
|
|
|
|
|
def download_attachment(request: dict) -> dict:
|
|
"""Stream an attachment off disk."""
|
|
import os
|
|
|
|
name = request["query"]["name"]
|
|
path = os.path.join(ATTACHMENT_ROOT, name)
|
|
if not os.path.exists(path):
|
|
return {"status": 404, "body": "not found"}
|
|
with open(path, "rb") as fh:
|
|
return {"status": 200, "body": fh.read()}
|