/api/file/upload, /api/file/[id], /api/file/[id]/download Endpoint 구현

src/routes/api/auth/login/+server.ts

@@ -1,7 +1,7 @@
 import { error, text } from "@sveltejs/kit";
 import ms from "ms";
 import env from "$lib/server/loadenv";
-import { loginRequest } from "$lib/server/schemas/auth";
+import { loginRequest } from "$lib/server/schemas";
 import { login } from "$lib/server/services/auth";
 import type { RequestHandler } from "./$types";
 

src/routes/api/auth/upgradeToken/+server.ts

@@ -3,7 +3,7 @@ import {
   tokenUpgradeRequest,
   tokenUpgradeResponse,
   type TokenUpgradeResponse,
-} from "$lib/server/schemas/auth";
+} from "$lib/server/schemas";
 import { createTokenUpgradeChallenge } from "$lib/server/services/auth";
 import type { RequestHandler } from "./$types";
 

src/routes/api/auth/upgradeToken/verify/+server.ts

@@ -1,7 +1,7 @@
 import { error, text } from "@sveltejs/kit";
 import ms from "ms";
 import env from "$lib/server/loadenv";
-import { tokenUpgradeVerifyRequest } from "$lib/server/schemas/auth";
+import { tokenUpgradeVerifyRequest } from "$lib/server/schemas";
 import { upgradeToken } from "$lib/server/services/auth";
 import type { RequestHandler } from "./$types";
 

src/routes/api/client/list/+server.ts

@@ -1,6 +1,6 @@
 import { json } from "@sveltejs/kit";
 import { authenticate } from "$lib/server/modules/auth";
-import { clientListResponse, type ClientListResponse } from "$lib/server/schemas/client";
+import { clientListResponse, type ClientListResponse } from "$lib/server/schemas";
 import { getUserClientList } from "$lib/server/services/client";
 import type { RequestHandler } from "@sveltejs/kit";
 

src/routes/api/client/register/+server.ts

@@ -4,7 +4,7 @@ import {
   clientRegisterRequest,
   clientRegisterResponse,
   type ClientRegisterResponse,
-} from "$lib/server/schemas/client";
+} from "$lib/server/schemas";
 import { registerUserClient } from "$lib/server/services/client";
 import type { RequestHandler } from "./$types";
 

src/routes/api/client/register/verify/+server.ts

@@ -1,6 +1,6 @@
 import { error, text } from "@sveltejs/kit";
 import { authenticate } from "$lib/server/modules/auth";
-import { clientRegisterVerifyRequest } from "$lib/server/schemas/client";
+import { clientRegisterVerifyRequest } from "$lib/server/schemas";
 import { verifyUserClient } from "$lib/server/services/client";
 import type { RequestHandler } from "./$types";
 

src/routes/api/client/status/+server.ts

@@ -1,6 +1,6 @@
 import { error, json } from "@sveltejs/kit";
 import { authenticate } from "$lib/server/modules/auth";
-import { clientStatusResponse, type ClientStatusResponse } from "$lib/server/schemas/client";
+import { clientStatusResponse, type ClientStatusResponse } from "$lib/server/schemas";
 import { getUserClientStatus } from "$lib/server/services/client";
 import type { RequestHandler } from "@sveltejs/kit";
 

src/routes/api/directory/[id]/+server.ts

@@ -1,7 +1,7 @@
 import { error, json } from "@sveltejs/kit";
 import { z } from "zod";
 import { authorize } from "$lib/server/modules/auth";
-import { directroyInfoResponse, type DirectroyInfoResponse } from "$lib/server/schemas/directory";
+import { directroyInfoResponse, type DirectroyInfoResponse } from "$lib/server/schemas";
 import { getDirectroyInformation } from "$lib/server/services/file";
 import type { RequestHandler } from "./$types";
 

src/routes/api/directory/create/+server.ts

@@ -1,7 +1,7 @@
 import { text } from "@sveltejs/kit";
 import { authorize } from "$lib/server/modules/auth";
 import { parseSignedRequest } from "$lib/server/modules/crypto";
-import { directoryCreateRequest } from "$lib/server/schemas/directory";
+import { directoryCreateRequest } from "$lib/server/schemas";
 import { createDirectory } from "$lib/server/services/file";
 import type { RequestHandler } from "./$types";
 

src/routes/api/file/[id]/+server.ts

@@ -0,0 +1,33 @@
+import { error, json } from "@sveltejs/kit";
+import { z } from "zod";
+import { authorize } from "$lib/server/modules/auth";
+import { fileInfoResponse, type FileInfoResponse } from "$lib/server/schemas";
+import { getFileInformation } from "$lib/server/services/file";
+import type { RequestHandler } from "./$types";
+
+export const GET: RequestHandler = async ({ cookies, params }) => {
+  const { userId } = await authorize(cookies, "activeClient");
+
+  const zodRes = z
+    .object({
+      id: z.coerce.number().int().positive(),
+    })
+    .safeParse(params);
+  if (!zodRes.success) error(400, "Invalid path parameters");
+  const { id } = zodRes.data;
+
+  const { createdAt, mekVersion, encDek, encContentIv, encName } = await getFileInformation(
+    userId,
+    id,
+  );
+  return json(
+    fileInfoResponse.parse({
+      createdAt,
+      mekVersion,
+      dek: encDek,
+      contentIv: encContentIv,
+      name: encName.ciphertext,
+      nameIv: encName.iv,
+    } satisfies FileInfoResponse),
+  );
+};

src/routes/api/file/[id]/download/+server.ts

@@ -0,0 +1,25 @@
+import { error } from "@sveltejs/kit";
+import { z } from "zod";
+import { authorize } from "$lib/server/modules/auth";
+import { getFileStream } from "$lib/server/services/file";
+import type { RequestHandler } from "./$types";
+
+export const GET: RequestHandler = async ({ cookies, params }) => {
+  const { userId } = await authorize(cookies, "activeClient");
+
+  const zodRes = z
+    .object({
+      id: z.coerce.number().int().positive(),
+    })
+    .safeParse(params);
+  if (!zodRes.success) error(400, "Invalid path parameters");
+  const { id } = zodRes.data;
+
+  const { encContentStream, encContentSize } = await getFileStream(userId, id);
+  return new Response(encContentStream, {
+    headers: {
+      "Content-Type": "application/octet-stream",
+      "Content-Length": encContentSize.toString(),
+    },
+  });
+};

src/routes/api/file/upload/+server.ts

@@ -0,0 +1,39 @@
+import { error, text } from "@sveltejs/kit";
+import { authorize } from "$lib/server/modules/auth";
+import { parseSignedRequest } from "$lib/server/modules/crypto";
+import { fileUploadRequest } from "$lib/server/schemas";
+import { uploadFile } from "$lib/server/services/file";
+import type { RequestHandler } from "./$types";
+
+export const POST: RequestHandler = async ({ request, cookies }) => {
+  const { userId, clientId } = await authorize(cookies, "activeClient");
+
+  const form = await request.formData();
+
+  const metadata = form.get("metadata");
+  if (!metadata || typeof metadata !== "string") {
+    error(400, "Invalid request body");
+  }
+  const { parentId, mekVersion, dek, contentHash, contentIv, name, nameIv } =
+    await parseSignedRequest(clientId, JSON.parse(metadata), fileUploadRequest);
+
+  const content = form.get("content");
+  if (!content || !(content instanceof File)) {
+    error(400, "Invalid request body");
+  }
+
+  await uploadFile(
+    {
+      userId,
+      parentId,
+      mekVersion,
+      encDek: dek,
+      encContentIv: contentIv,
+      encName: name,
+      encNameIv: nameIv,
+    },
+    content.stream(),
+    contentHash,
+  );
+  return text("File uploaded", { headers: { "Content-Type": "text/plain" } });
+};

src/routes/api/mek/list/+server.ts

@@ -1,6 +1,6 @@
 import { json } from "@sveltejs/kit";
 import { authorize } from "$lib/server/modules/auth";
-import { masterKeyListResponse, type MasterKeyListResponse } from "$lib/server/schemas/mek";
+import { masterKeyListResponse, type MasterKeyListResponse } from "$lib/server/schemas";
 import { getClientMekList } from "$lib/server/services/mek";
 import type { RequestHandler } from "./$types";
 

src/routes/api/mek/register/initial/+server.ts

@@ -1,7 +1,7 @@
 import { error, text } from "@sveltejs/kit";
 import { authenticate } from "$lib/server/modules/auth";
 import { parseSignedRequest } from "$lib/server/modules/crypto";
-import { initialMasterKeyRegisterRequest } from "$lib/server/schemas/mek";
+import { initialMasterKeyRegisterRequest } from "$lib/server/schemas";
 import { registerInitialActiveMek } from "$lib/server/services/mek";
 import type { RequestHandler } from "./$types";