mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-12-17 08:50:15 +01:00
* fix: sanitize filename in multer storage callback * fix: ensure temporary image upload file is deleted after processing * fix: prevent cleanup flag from being set to false before actually deleted * refactor: user avatar, typing, use 'file' for formData instead of 'input', add disk storage, use localization * fix: update Avatar component to include image dimensions in formData and refactor editor reference type * fix: refactor avatar upload handling to use fs for file reading and enhance file validation * fix: ensure temporary image upload file is deleted after processing * fix: refactor avatar upload routes and handlers for agents and assistants, improve file handling and validation * fix: improve audio file validation and cleanup * fix: add filename sanitization utility and integrate it into multer storage configuration * fix: update group project ID check for null and refactor delete prompt group response type * fix: invalid access control for deleting prompt groups * fix: add error handling and logging to checkBan middleware * fix: catch conversation parsing errors * chore: revert unnecessary height and width parameters from avatar upload * chore: update librechat-data-provider version to 0.7.55 * style: ensure KaTeX can spread across visible space
81 lines
2.5 KiB
JavaScript
81 lines
2.5 KiB
JavaScript
const fs = require('fs');
|
|
const path = require('path');
|
|
const crypto = require('crypto');
|
|
const multer = require('multer');
|
|
const { fileConfig: defaultFileConfig, mergeFileConfig } = require('librechat-data-provider');
|
|
const { sanitizeFilename } = require('~/server/utils/handleText');
|
|
const { getCustomConfig } = require('~/server/services/Config');
|
|
|
|
const storage = multer.diskStorage({
|
|
destination: function (req, file, cb) {
|
|
const outputPath = path.join(req.app.locals.paths.uploads, 'temp', req.user.id);
|
|
if (!fs.existsSync(outputPath)) {
|
|
fs.mkdirSync(outputPath, { recursive: true });
|
|
}
|
|
cb(null, outputPath);
|
|
},
|
|
filename: function (req, file, cb) {
|
|
req.file_id = crypto.randomUUID();
|
|
file.originalname = decodeURIComponent(file.originalname);
|
|
const sanitizedFilename = sanitizeFilename(file.originalname);
|
|
cb(null, sanitizedFilename);
|
|
},
|
|
});
|
|
|
|
const importFileFilter = (req, file, cb) => {
|
|
if (file.mimetype === 'application/json') {
|
|
cb(null, true);
|
|
} else if (path.extname(file.originalname).toLowerCase() === '.json') {
|
|
cb(null, true);
|
|
} else {
|
|
cb(new Error('Only JSON files are allowed'), false);
|
|
}
|
|
};
|
|
|
|
/**
|
|
*
|
|
* @param {import('librechat-data-provider').FileConfig | undefined} customFileConfig
|
|
*/
|
|
const createFileFilter = (customFileConfig) => {
|
|
/**
|
|
* @param {ServerRequest} req
|
|
* @param {Express.Multer.File}
|
|
* @param {import('multer').FileFilterCallback} cb
|
|
*/
|
|
const fileFilter = (req, file, cb) => {
|
|
if (!file) {
|
|
return cb(new Error('No file provided'), false);
|
|
}
|
|
|
|
if (req.originalUrl.endsWith('/speech/stt') && file.mimetype.startsWith('audio/')) {
|
|
return cb(null, true);
|
|
}
|
|
|
|
const endpoint = req.body.endpoint;
|
|
const supportedTypes =
|
|
customFileConfig?.endpoints?.[endpoint]?.supportedMimeTypes ??
|
|
customFileConfig?.endpoints?.default.supportedMimeTypes ??
|
|
defaultFileConfig?.endpoints?.[endpoint]?.supportedMimeTypes;
|
|
|
|
if (!defaultFileConfig.checkType(file.mimetype, supportedTypes)) {
|
|
return cb(new Error('Unsupported file type: ' + file.mimetype), false);
|
|
}
|
|
|
|
cb(null, true);
|
|
};
|
|
|
|
return fileFilter;
|
|
};
|
|
|
|
const createMulterInstance = async () => {
|
|
const customConfig = await getCustomConfig();
|
|
const fileConfig = mergeFileConfig(customConfig?.fileConfig);
|
|
const fileFilter = createFileFilter(fileConfig);
|
|
return multer({
|
|
storage,
|
|
fileFilter,
|
|
limits: { fileSize: fileConfig.serverFileSizeLimit },
|
|
});
|
|
};
|
|
|
|
module.exports = { createMulterInstance, storage, importFileFilter };
|