HideyoshiNakazone/hideyoshi-blog
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add admin role check for article deletion in storage.external.ts
All checks were successful
Build and Test / run-test (20.x) (push) Successful in 1m53s
Details

Browse Source
This commit is contained in:
Vitor Hideyoshi
2026-04-11 02:01:36 -03:00
parent 3ea1112369
commit 3addd38bba
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
src/lib/storage/storage.external.ts
View File

@@ -1,5 +1,6 @@
'use server'; 'use server';
import { getSessionData } from '@/lib/session/session-storage';
import { createStorageProvider } from '@/lib/storage/storage.factory'; import { createStorageProvider } from '@/lib/storage/storage.factory';
import { StorageProvider } from '@/lib/storage/storage.interface'; import { StorageProvider } from '@/lib/storage/storage.interface';
import { TypedResult } from '@/utils/types/results'; import { TypedResult } from '@/utils/types/results';
@@ -13,6 +14,10 @@ export const getSignedUrl = async (
if (!storageProvider) { if (!storageProvider) {
storageProvider = storage; storageProvider = storage;
} }
const session = await getSessionData();
if (!session || !session?.user || session?.user.role !== 'admin') {
throw new Error('Unauthorized: Only admin users can delete articles.');
}
return await storageProvider.get(key); return await storageProvider.get(key);
}; };
@@ -23,6 +28,10 @@ export const checkExists = async (
if (!storageProvider) { if (!storageProvider) {
storageProvider = storage; storageProvider = storage;
} }
const session = await getSessionData();
if (!session || !session?.user || session?.user.role !== 'admin') {
throw new Error('Unauthorized: Only admin users can delete articles.');
}
return await storageProvider.exists(key); return await storageProvider.exists(key);
}; };
@@ -34,6 +43,10 @@ export const getPutUrl = async (
if (!storageProvider) { if (!storageProvider) {
storageProvider = storage; storageProvider = storage;
} }
const session = await getSessionData();
if (!session || !session?.user || session?.user.role !== 'admin') {
throw new Error('Unauthorized: Only admin users can delete articles.');
}
return await storageProvider.put(key, contentType); return await storageProvider.put(key, contentType);
}; };
@@ -44,5 +57,9 @@ export const deleteByKey = async (
if (!storageProvider) { if (!storageProvider) {
storageProvider = storage; storageProvider = storage;
} }
const session = await getSessionData();
if (!session || !session?.user || session?.user.role !== 'admin') {
throw new Error('Unauthorized: Only admin users can delete articles.');
}
return await storageProvider.delete(key); return await storageProvider.delete(key);
}; };