{upload.PublicId} - Confirm deletion

global using BlobBin; using System.Text; using System.Text.Json; using IOL.Helpers; using File = BlobBin.File; const long MAX_REQUEST_BODY_SIZE = 104_857_600; var builder = WebApplication.CreateBuilder(args); builder.Services.AddDbContext(); builder.Services.AddHostedService(); builder.WebHost.UseKestrel(o => { o.Limits.MaxRequestBodySize = MAX_REQUEST_BODY_SIZE; }); var app = builder.Build(); app.UseFileServer(); app.UseStatusCodePages(); app.MapGet("/upload-link", GetFileUploadLink); app.MapPost("/file/{id}", UploadFilePart); app.MapPost("/file", UploadFile); app.MapPost("/text", UploadText); app.MapGet("/b/{id}/delete", DeleteUpload); app.MapGet("/p/{id}/delete", DeleteUpload); app.MapPost("/b/{id}", GetFile); app.MapGet("/b/{id}", GetFile); app.MapGet("/p/{id}", GetPaste); app.MapPost("/p/{id}", GetPaste); Tools.GetFilesDirectoryPath(true); app.Run(); IResult DeleteUpload(HttpContext context, Db db, string id, string key = default, bool confirmed = false) { if (key.IsNullOrWhiteSpace()) { return Results.BadRequest("No key was found"); } var isPaste = context.Request.Path.StartsWithSegments("/p"); UploadEntityBase? upload = isPaste ? db.Pastes.FirstOrDefault(c => c.PublicId == id) : db.Files.FirstOrDefault(c => c.PublicId == id); if (upload is not {DeletedAt: null}) { return Results.NotFound(); } if (upload.DeletionKey != key) { return Results.Text("Invalid key", default, default, 400); } if (!confirmed) { return Results.Content($""" {upload.PublicId} - Confirm deletion - Blobbin

Are you sure you want to delete {upload.Name}?

Yes No, cancel """, "text/html"); } upload.DeletedAt = DateTime.UtcNow; db.SaveChanges(); return Results.Text(""" The file is marked for deletion and cannot be accessed any more, all traces off it will be gone from our systems within 7 days. """); } IResult GetFileUploadLink(HttpContext context, Db db) { var file = new File { CreatedBy = context.Request.Headers["X-Forwarded-For"].ToString() }; db.Files.Add(file); db.SaveChanges(); return Results.Text( context.Request.GetRequestHost() + "/upload/" + file.Id ); } async Task UploadFile(HttpContext context, Db db) { if (!context.Request.Form.Files.Any()) { return Results.BadRequest("No files was found in request"); } var file = new File { CreatedBy = context.Request.Headers["X-Forwarded-For"].ToString(), Singleton = context.Request.Form["singleton"] == "on", AutoDeleteAfter = context.Request.Form["autoDeleteAfter"], Length = context.Request.Form.Files[0].Length, Name = context.Request.Form.Files[0].FileName, MimeType = context.Request.Form.Files[0].ContentType, PublicId = GetUnusedPublicFileId(db), DeletionKey = RandomString.Generate(6), }; if (context.Request.Form["password"].ToString().HasValue()) { file.PasswordHash = PasswordHelper.HashPassword(context.Request.Form["password"]); } await using var write = System.IO.File.OpenWrite( Path.Combine(Tools.GetFilesDirectoryPath(), file.Id.ToString()) ); await context.Request.Form.Files[0].CopyToAsync(write); db.Files.Add(file); db.SaveChanges(); var deletionNote = "The file is only deleted when you request it."; if (file.AutoDeleteAfter.HasValue()) { var relativeDateTime = file.CreatedAt.Add(Tools.ParseHumanTimeSpan(file.AutoDeleteAfter)); deletionNote = $"The file will be automatically deleted at {relativeDateTime:u}"; } return Results.Text($""" Your file is available here: {context.Request.GetRequestHost()}/b/{file.PublicId} To delete the file, open this url in a browser {context.Request.GetRequestHost()}/b/{file.PublicId}/delete?key={file.DeletionKey}. {deletionNote} """); } IResult UploadFilePart(HttpContext context, Db db) { return Results.Ok(); } async Task UploadText(HttpContext context, Db db) { if (context.Request.Form["content"].ToString().IsNullOrWhiteSpace()) { return Results.Text("No content was found in request", default, default, 400); } var paste = new Paste { CreatedBy = context.Request.Headers["X-Forwarded-For"].ToString(), Singleton = context.Request.Form["singleton"] == "on", AutoDeleteAfter = context.Request.Form["autoDeleteAfter"], Length = context.Request.Form["content"].Count, Name = context.Request.Form["name"], MimeType = context.Request.Form["mime"], PublicId = GetUnusedPublicPasteId(db), Content = context.Request.Form["content"], DeletionKey = RandomString.Generate(6), }; if (paste.MimeType.IsNullOrWhiteSpace()) { paste.MimeType = "text/plain"; } if (context.Request.Form["password"].ToString().HasValue()) { paste.PasswordHash = PasswordHelper.HashPassword(context.Request.Form["password"]); } db.Pastes.Add(paste); db.SaveChanges(); var deletionNote = "The paste is only deleted when you request it."; if (paste.AutoDeleteAfter.HasValue()) { var relativeDateTime = paste.CreatedAt.Add(Tools.ParseHumanTimeSpan(paste.AutoDeleteAfter)); deletionNote = $"The paste will be automatically deleted at {relativeDateTime:u}"; } return Results.Text($""" Your paste is available here: {context.Request.GetRequestHost()}/p/{paste.PublicId} To delete the paste, open this url in a browser {context.Request.GetRequestHost()}/p/{paste.PublicId}/delete?key={paste.DeletionKey}. {deletionNote} """); } async Task GetPaste(HttpContext context, string id, Db db) { var paste = db.Pastes.FirstOrDefault(c => c.PublicId == id.Trim()); if (paste is not {DeletedAt: null}) return Results.NotFound(); if (paste.PasswordHash.HasValue()) { var password = context.Request.Method == "POST" ? context.Request.Form["password"].ToString() : ""; if (password.IsNullOrWhiteSpace() || !PasswordHelper.Verify(password, paste.PasswordHash)) { return Results.Content($""" {paste.PublicId} - Authenticate - Blobbin """, "text/html"); } } if (paste.Singleton) { paste.DeletedAt = DateTime.UtcNow; db.SaveChanges(); } if (ShouldDeleteUpload(paste)) { paste.DeletedAt = DateTime.UtcNow; db.SaveChanges(); } Console.WriteLine(JsonSerializer.Serialize(paste)); return Results.Content(paste.Content, paste.MimeType, Encoding.UTF8); } async Task GetFile(HttpContext context, Db db, string id, bool download = false) { var file = db.Files.FirstOrDefault(c => c.PublicId == id.Trim()); if (file is not {DeletedAt: null}) return Results.NotFound(); if (file.PasswordHash.HasValue()) { var password = context.Request.Method == "POST" ? context.Request.Form["password"].ToString() : ""; if (password.IsNullOrWhiteSpace() || !PasswordHelper.Verify(password, file.PasswordHash)) { return Results.Content($""" {file.PublicId} - Authenticate - Blobbin """, "text/html"); } } if (file.Singleton) { file.DeletedAt = DateTime.UtcNow; db.SaveChanges(); } if (ShouldDeleteUpload(file)) { file.DeletedAt = DateTime.UtcNow; db.SaveChanges(); } var reader = await System.IO.File.ReadAllBytesAsync( Path.Combine( Tools.GetFilesDirectoryPath(), file.Id.ToString() ) ); return download ? Results.File(reader, file.MimeType, file.Name) : Results.Bytes(reader, file.MimeType); } bool ShouldDeleteUpload(UploadEntityBase entity) { if (entity.AutoDeleteAfter.IsNullOrWhiteSpace()) { return false; } var deletedDateTime = entity.CreatedAt.Add(Tools.ParseHumanTimeSpan(entity.AutoDeleteAfter)); return DateTime.Compare(DateTime.UtcNow, deletedDateTime) > 0; } string GetUnusedPublicFileId(Db db) { string id() => RandomString.Generate(3); var res = id(); while (db.Files.Any(c => c.PublicId == res)) { res = id(); } return res; } string GetUnusedPublicPasteId(Db db) { string id() => RandomString.Generate(3); var res = id(); while (db.Pastes.Any(c => c.PublicId == res)) { res = id(); } return res; }