482 lines
18 KiB
Python
482 lines
18 KiB
Python
#
|
||
# Copyright 2024 The InfiniFlow Authors. All Rights Reserved.
|
||
#
|
||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||
# you may not use this file except in compliance with the License.
|
||
# You may obtain a copy of the License at
|
||
#
|
||
# http://www.apache.org/licenses/LICENSE-2.0
|
||
#
|
||
# Unless required by applicable law or agreed to in writing, software
|
||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
# See the License for the specific language governing permissions and
|
||
# limitations under the License
|
||
#
|
||
import os
|
||
import pathlib
|
||
import re
|
||
from typing import List, Optional
|
||
|
||
from fastapi import APIRouter, Depends, File, Form, HTTPException, UploadFile, Query
|
||
from fastapi.responses import StreamingResponse
|
||
from fastapi.security import HTTPAuthorizationCredentials
|
||
from api.utils.api_utils import security
|
||
|
||
from api.common.check_team_permission import check_file_team_permission
|
||
from api.db.services.document_service import DocumentService
|
||
from api.db.services.file2document_service import File2DocumentService
|
||
from api.utils.api_utils import server_error_response, get_data_error_result, validate_request
|
||
from api.utils import get_uuid
|
||
from api.db import FileType, FileSource
|
||
from api.db.services import duplicate_name
|
||
from api.db.services.file_service import FileService
|
||
from api import settings
|
||
from api.utils.api_utils import get_json_result
|
||
from api.utils.file_utils import filename_type
|
||
from api.utils.web_utils import CONTENT_TYPE_MAP
|
||
from rag.utils.storage_factory import STORAGE_IMPL
|
||
from pydantic import BaseModel
|
||
|
||
# Security
|
||
|
||
# Pydantic models for request/response
|
||
class CreateFileRequest(BaseModel):
|
||
name: str
|
||
parent_id: Optional[str] = None
|
||
type: Optional[str] = None
|
||
|
||
class RemoveFileRequest(BaseModel):
|
||
file_ids: List[str]
|
||
|
||
class RenameFileRequest(BaseModel):
|
||
file_id: str
|
||
name: str
|
||
|
||
class MoveFileRequest(BaseModel):
|
||
src_file_ids: List[str]
|
||
dest_file_id: str
|
||
|
||
# Dependency injection
|
||
async def get_current_user(credentials: HTTPAuthorizationCredentials = Depends(security)):
|
||
"""获取当前用户"""
|
||
from api.db import StatusEnum
|
||
from api.db.services.user_service import UserService
|
||
from fastapi import HTTPException, status
|
||
import logging
|
||
|
||
try:
|
||
from itsdangerous.url_safe import URLSafeTimedSerializer as Serializer
|
||
except ImportError:
|
||
# 如果没有itsdangerous，使用jwt作为替代
|
||
import jwt
|
||
Serializer = jwt
|
||
|
||
jwt = Serializer(secret_key=settings.SECRET_KEY)
|
||
authorization = credentials.credentials
|
||
|
||
if authorization:
|
||
try:
|
||
access_token = str(jwt.loads(authorization))
|
||
|
||
if not access_token or not access_token.strip():
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail="Authentication attempt with empty access token"
|
||
)
|
||
|
||
# Access tokens should be UUIDs (32 hex characters)
|
||
if len(access_token.strip()) < 32:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail=f"Authentication attempt with invalid token format: {len(access_token)} chars"
|
||
)
|
||
|
||
user = UserService.query(
|
||
access_token=access_token, status=StatusEnum.VALID.value
|
||
)
|
||
if user:
|
||
if not user[0].access_token or not user[0].access_token.strip():
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail=f"User {user[0].email} has empty access_token in database"
|
||
)
|
||
return user[0]
|
||
else:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail="Invalid access token"
|
||
)
|
||
except Exception as e:
|
||
logging.warning(f"load_user got exception {e}")
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail="Invalid access token"
|
||
)
|
||
else:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail="Authorization header required"
|
||
)
|
||
|
||
# Create router
|
||
router = APIRouter()
|
||
|
||
|
||
@router.post('/upload')
|
||
async def upload(
|
||
parent_id: Optional[str] = Form(None),
|
||
files: List[UploadFile] = File(...),
|
||
current_user = Depends(get_current_user)
|
||
):
|
||
pf_id = parent_id
|
||
|
||
if not pf_id:
|
||
root_folder = FileService.get_root_folder(current_user.id)
|
||
pf_id = root_folder["id"]
|
||
|
||
if not files:
|
||
return get_json_result(
|
||
data=False, message='No file part!', code=settings.RetCode.ARGUMENT_ERROR)
|
||
|
||
file_objs = files
|
||
|
||
for file_obj in file_objs:
|
||
if file_obj.filename == '':
|
||
return get_json_result(
|
||
data=False, message='No file selected!', code=settings.RetCode.ARGUMENT_ERROR)
|
||
file_res = []
|
||
try:
|
||
e, pf_folder = FileService.get_by_id(pf_id)
|
||
if not e:
|
||
return get_data_error_result( message="Can't find this folder!")
|
||
for file_obj in file_objs:
|
||
MAX_FILE_NUM_PER_USER = int(os.environ.get('MAX_FILE_NUM_PER_USER', 0))
|
||
if MAX_FILE_NUM_PER_USER > 0 and DocumentService.get_doc_count(current_user.id) >= MAX_FILE_NUM_PER_USER:
|
||
return get_data_error_result( message="Exceed the maximum file number of a free user!")
|
||
|
||
# split file name path
|
||
if not file_obj.filename:
|
||
file_obj_names = [pf_folder.name, file_obj.filename]
|
||
else:
|
||
full_path = '/' + file_obj.filename
|
||
file_obj_names = full_path.split('/')
|
||
file_len = len(file_obj_names)
|
||
|
||
# get folder
|
||
file_id_list = FileService.get_id_list_by_id(pf_id, file_obj_names, 1, [pf_id])
|
||
len_id_list = len(file_id_list)
|
||
|
||
# create folder
|
||
if file_len != len_id_list:
|
||
e, file = FileService.get_by_id(file_id_list[len_id_list - 1])
|
||
if not e:
|
||
return get_data_error_result(message="Folder not found!")
|
||
last_folder = FileService.create_folder(file, file_id_list[len_id_list - 1], file_obj_names,
|
||
len_id_list)
|
||
else:
|
||
e, file = FileService.get_by_id(file_id_list[len_id_list - 2])
|
||
if not e:
|
||
return get_data_error_result(message="Folder not found!")
|
||
last_folder = FileService.create_folder(file, file_id_list[len_id_list - 2], file_obj_names,
|
||
len_id_list)
|
||
|
||
# file type
|
||
filetype = filename_type(file_obj_names[file_len - 1])
|
||
location = file_obj_names[file_len - 1]
|
||
while STORAGE_IMPL.obj_exist(last_folder.id, location):
|
||
location += "_"
|
||
blob = await file_obj.read()
|
||
filename = duplicate_name(
|
||
FileService.query,
|
||
name=file_obj_names[file_len - 1],
|
||
parent_id=last_folder.id)
|
||
STORAGE_IMPL.put(last_folder.id, location, blob)
|
||
file = {
|
||
"id": get_uuid(),
|
||
"parent_id": last_folder.id,
|
||
"tenant_id": current_user.id,
|
||
"created_by": current_user.id,
|
||
"type": filetype,
|
||
"name": filename,
|
||
"location": location,
|
||
"size": len(blob),
|
||
}
|
||
file = FileService.insert(file)
|
||
file_res.append(file.to_json())
|
||
return get_json_result(data=file_res)
|
||
except Exception as e:
|
||
return server_error_response(e)
|
||
|
||
|
||
@router.post('/create')
|
||
async def create(
|
||
req: CreateFileRequest,
|
||
current_user = Depends(get_current_user)
|
||
):
|
||
pf_id = req.parent_id
|
||
input_file_type = req.type
|
||
if not pf_id:
|
||
root_folder = FileService.get_root_folder(current_user.id)
|
||
pf_id = root_folder["id"]
|
||
|
||
try:
|
||
if not FileService.is_parent_folder_exist(pf_id):
|
||
return get_json_result(
|
||
data=False, message="Parent Folder Doesn't Exist!", code=settings.RetCode.OPERATING_ERROR)
|
||
if FileService.query(name=req.name, parent_id=pf_id):
|
||
return get_data_error_result(
|
||
message="Duplicated folder name in the same folder.")
|
||
|
||
if input_file_type == FileType.FOLDER.value:
|
||
file_type = FileType.FOLDER.value
|
||
else:
|
||
file_type = FileType.VIRTUAL.value
|
||
|
||
file = FileService.insert({
|
||
"id": get_uuid(),
|
||
"parent_id": pf_id,
|
||
"tenant_id": current_user.id,
|
||
"created_by": current_user.id,
|
||
"name": req.name,
|
||
"location": "",
|
||
"size": 0,
|
||
"type": file_type
|
||
})
|
||
|
||
return get_json_result(data=file.to_json())
|
||
except Exception as e:
|
||
return server_error_response(e)
|
||
|
||
|
||
@router.get('/list')
|
||
async def list_files(
|
||
parent_id: Optional[str] = Query(None),
|
||
keywords: str = Query(""),
|
||
page: int = Query(1),
|
||
page_size: int = Query(15),
|
||
orderby: str = Query("create_time"),
|
||
desc: bool = Query(True),
|
||
current_user = Depends(get_current_user)
|
||
):
|
||
pf_id = parent_id
|
||
|
||
if not pf_id:
|
||
root_folder = FileService.get_root_folder(current_user.id)
|
||
pf_id = root_folder["id"]
|
||
FileService.init_knowledgebase_docs(pf_id, current_user.id)
|
||
try:
|
||
e, file = FileService.get_by_id(pf_id)
|
||
if not e:
|
||
return get_data_error_result(message="Folder not found!")
|
||
|
||
files, total = FileService.get_by_pf_id(
|
||
current_user.id, pf_id, page, page_size, orderby, desc, keywords)
|
||
|
||
parent_folder = FileService.get_parent_folder(pf_id)
|
||
if not parent_folder:
|
||
return get_json_result(message="File not found!")
|
||
|
||
return get_json_result(data={"total": total, "files": files, "parent_folder": parent_folder.to_json()})
|
||
except Exception as e:
|
||
return server_error_response(e)
|
||
|
||
|
||
@router.get('/root_folder')
|
||
async def get_root_folder(current_user = Depends(get_current_user)):
|
||
try:
|
||
root_folder = FileService.get_root_folder(current_user.id)
|
||
return get_json_result(data={"root_folder": root_folder})
|
||
except Exception as e:
|
||
return server_error_response(e)
|
||
|
||
|
||
@router.get('/parent_folder')
|
||
async def get_parent_folder(
|
||
file_id: str = Query(...),
|
||
current_user = Depends(get_current_user)
|
||
):
|
||
try:
|
||
e, file = FileService.get_by_id(file_id)
|
||
if not e:
|
||
return get_data_error_result(message="Folder not found!")
|
||
|
||
parent_folder = FileService.get_parent_folder(file_id)
|
||
return get_json_result(data={"parent_folder": parent_folder.to_json()})
|
||
except Exception as e:
|
||
return server_error_response(e)
|
||
|
||
|
||
@router.get('/all_parent_folder')
|
||
async def get_all_parent_folders(
|
||
file_id: str = Query(...),
|
||
current_user = Depends(get_current_user)
|
||
):
|
||
try:
|
||
e, file = FileService.get_by_id(file_id)
|
||
if not e:
|
||
return get_data_error_result(message="Folder not found!")
|
||
|
||
parent_folders = FileService.get_all_parent_folders(file_id)
|
||
parent_folders_res = []
|
||
for parent_folder in parent_folders:
|
||
parent_folders_res.append(parent_folder.to_json())
|
||
return get_json_result(data={"parent_folders": parent_folders_res})
|
||
except Exception as e:
|
||
return server_error_response(e)
|
||
|
||
|
||
@router.post('/rm')
|
||
async def rm(
|
||
req: RemoveFileRequest,
|
||
current_user = Depends(get_current_user)
|
||
):
|
||
file_ids = req.file_ids
|
||
try:
|
||
for file_id in file_ids:
|
||
e, file = FileService.get_by_id(file_id)
|
||
if not e:
|
||
return get_data_error_result(message="File or Folder not found!")
|
||
if not file.tenant_id:
|
||
return get_data_error_result(message="Tenant not found!")
|
||
if not check_file_team_permission(file, current_user.id):
|
||
return get_json_result(data=False, message='No authorization.', code=settings.RetCode.AUTHENTICATION_ERROR)
|
||
if file.source_type == FileSource.KNOWLEDGEBASE:
|
||
continue
|
||
|
||
if file.type == FileType.FOLDER.value:
|
||
file_id_list = FileService.get_all_innermost_file_ids(file_id, [])
|
||
for inner_file_id in file_id_list:
|
||
e, file = FileService.get_by_id(inner_file_id)
|
||
if not e:
|
||
return get_data_error_result(message="File not found!")
|
||
STORAGE_IMPL.rm(file.parent_id, file.location)
|
||
FileService.delete_folder_by_pf_id(current_user.id, file_id)
|
||
else:
|
||
STORAGE_IMPL.rm(file.parent_id, file.location)
|
||
if not FileService.delete(file):
|
||
return get_data_error_result(
|
||
message="Database error (File removal)!")
|
||
|
||
# delete file2document
|
||
informs = File2DocumentService.get_by_file_id(file_id)
|
||
for inform in informs:
|
||
doc_id = inform.document_id
|
||
e, doc = DocumentService.get_by_id(doc_id)
|
||
if not e:
|
||
return get_data_error_result(message="Document not found!")
|
||
tenant_id = DocumentService.get_tenant_id(doc_id)
|
||
if not tenant_id:
|
||
return get_data_error_result(message="Tenant not found!")
|
||
if not DocumentService.remove_document(doc, tenant_id):
|
||
return get_data_error_result(
|
||
message="Database error (Document removal)!")
|
||
File2DocumentService.delete_by_file_id(file_id)
|
||
|
||
return get_json_result(data=True)
|
||
except Exception as e:
|
||
return server_error_response(e)
|
||
|
||
|
||
@router.post('/rename')
|
||
async def rename(
|
||
req: RenameFileRequest,
|
||
current_user = Depends(get_current_user)
|
||
):
|
||
try:
|
||
e, file = FileService.get_by_id(req.file_id)
|
||
if not e:
|
||
return get_data_error_result(message="File not found!")
|
||
if not check_file_team_permission(file, current_user.id):
|
||
return get_json_result(data=False, message='No authorization.', code=settings.RetCode.AUTHENTICATION_ERROR)
|
||
if file.type != FileType.FOLDER.value \
|
||
and pathlib.Path(req.name.lower()).suffix != pathlib.Path(
|
||
file.name.lower()).suffix:
|
||
return get_json_result(
|
||
data=False,
|
||
message="The extension of file can't be changed",
|
||
code=settings.RetCode.ARGUMENT_ERROR)
|
||
for file in FileService.query(name=req.name, pf_id=file.parent_id):
|
||
if file.name == req.name:
|
||
return get_data_error_result(
|
||
message="Duplicated file name in the same folder.")
|
||
|
||
if not FileService.update_by_id(
|
||
req.file_id, {"name": req.name}):
|
||
return get_data_error_result(
|
||
message="Database error (File rename)!")
|
||
|
||
informs = File2DocumentService.get_by_file_id(req.file_id)
|
||
if informs:
|
||
if not DocumentService.update_by_id(
|
||
informs[0].document_id, {"name": req.name}):
|
||
return get_data_error_result(
|
||
message="Database error (Document rename)!")
|
||
|
||
return get_json_result(data=True)
|
||
except Exception as e:
|
||
return server_error_response(e)
|
||
|
||
|
||
@router.get('/get/{file_id}')
|
||
async def get(file_id: str, current_user = Depends(get_current_user)):
|
||
try:
|
||
e, file = FileService.get_by_id(file_id)
|
||
if not e:
|
||
return get_data_error_result(message="Document not found!")
|
||
if not check_file_team_permission(file, current_user.id):
|
||
return get_json_result(data=False, message='No authorization.', code=settings.RetCode.AUTHENTICATION_ERROR)
|
||
|
||
blob = STORAGE_IMPL.get(file.parent_id, file.location)
|
||
if not blob:
|
||
b, n = File2DocumentService.get_storage_address(file_id=file_id)
|
||
blob = STORAGE_IMPL.get(b, n)
|
||
|
||
ext = re.search(r"\.([^.]+)$", file.name.lower())
|
||
ext = ext.group(1) if ext else None
|
||
if ext:
|
||
if file.type == FileType.VISUAL.value:
|
||
content_type = CONTENT_TYPE_MAP.get(ext, f"image/{ext}")
|
||
else:
|
||
content_type = CONTENT_TYPE_MAP.get(ext, f"application/{ext}")
|
||
else:
|
||
content_type = "application/octet-stream"
|
||
|
||
return StreamingResponse(
|
||
iter([blob]),
|
||
media_type=content_type,
|
||
headers={"Content-Disposition": f"attachment; filename={file.name}"}
|
||
)
|
||
except Exception as e:
|
||
return server_error_response(e)
|
||
|
||
|
||
@router.post('/mv')
|
||
async def move(
|
||
req: MoveFileRequest,
|
||
current_user = Depends(get_current_user)
|
||
):
|
||
try:
|
||
file_ids = req.src_file_ids
|
||
parent_id = req.dest_file_id
|
||
files = FileService.get_by_ids(file_ids)
|
||
files_dict = {}
|
||
for file in files:
|
||
files_dict[file.id] = file
|
||
|
||
for file_id in file_ids:
|
||
file = files_dict[file_id]
|
||
if not file:
|
||
return get_data_error_result(message="File or Folder not found!")
|
||
if not file.tenant_id:
|
||
return get_data_error_result(message="Tenant not found!")
|
||
if not check_file_team_permission(file, current_user.id):
|
||
return get_json_result(data=False, message='No authorization.', code=settings.RetCode.AUTHENTICATION_ERROR)
|
||
fe, _ = FileService.get_by_id(parent_id)
|
||
if not fe:
|
||
return get_data_error_result(message="Parent Folder not found!")
|
||
FileService.move_file(file_ids, parent_id)
|
||
return get_json_result(data=True)
|
||
except Exception as e:
|
||
return server_error_response(e)
|