Task Attachments (#104)

pkg/routes/api/v1/info.go

@@ -28,6 +28,7 @@ type vikunjaInfos struct {
 	FrontendURL        string `json:"frontend_url"`
 	Motd               string `json:"motd"`
 	LinkSharingEnabled bool   `json:"link_sharing_enabled"`
+	MaxFileSize        int64  `json:"max_file_size"`
 }
 
 // Info is the handler to get infos about this vikunja instance
@@ -43,5 +44,6 @@ func Info(c echo.Context) error {
 		FrontendURL:        config.ServiceFrontendurl.GetString(),
 		Motd:               config.ServiceMotd.GetString(),
 		LinkSharingEnabled: config.ServiceEnableLinkSharing.GetBool(),
+		MaxFileSize:        config.FilesMaxSize.GetInt64(),
 	})
 }

pkg/routes/api/v1/list_by_namespace.go

@@ -77,7 +77,7 @@ func getNamespace(c echo.Context) (namespace *models.Namespace, err error) {
 	if err != nil {
 		return
 	}
-	namespace.ID = namespaceID
+	namespace = &models.Namespace{ID: namespaceID}
 	canRead, err := namespace.CanRead(user)
 	if err != nil {
 		return namespace, err

pkg/routes/api/v1/task_attachment.go

@@ -0,0 +1,143 @@
+//   Vikunja is a todo-list application to facilitate your life.
+//   Copyright 2019 Vikunja and contributors. All rights reserved.
+//
+//   This program is free software: you can redistribute it and/or modify
+//   it under the terms of the GNU General Public License as published by
+//   the Free Software Foundation, either version 3 of the License, or
+//   (at your option) any later version.
+//
+//   This program is distributed in the hope that it will be useful,
+//   but WITHOUT ANY WARRANTY; without even the implied warranty of
+//   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+//   GNU General Public License for more details.
+//
+//   You should have received a copy of the GNU General Public License
+//   along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+package v1
+
+import (
+	"code.vikunja.io/api/pkg/models"
+	"code.vikunja.io/web/handler"
+	"github.com/labstack/echo/v4"
+	"net/http"
+)
+
+// UploadTaskAttachment handles everything needed for the upload of a task attachment
+// @Summary Upload a task attachment
+// @Description Upload a task attachment. You can pass multiple files with the files form param.
+// @tags task
+// @Accept mpfd
+// @Produce json
+// @Param id path int true "Task ID"
+// @Param files formData string true "The file, as multipart form file. You can pass multiple."
+// @Security JWTKeyAuth
+// @Success 200 {object} models.Message "Attachments were uploaded successfully."
+// @Failure 403 {object} models.Message "No access to the task."
+// @Failure 404 {object} models.Message "The task does not exist."
+// @Failure 500 {object} models.Message "Internal error"
+// @Router /tasks/{id}/attachments [put]
+func UploadTaskAttachment(c echo.Context) error {
+
+	var taskAttachment models.TaskAttachment
+	if err := c.Bind(&taskAttachment); err != nil {
+		return echo.NewHTTPError(http.StatusBadRequest, "No task ID provided")
+	}
+
+	// Rights check
+	user, err := models.GetCurrentUser(c)
+	if err != nil {
+		return handler.HandleHTTPError(err, c)
+	}
+	can, err := taskAttachment.CanCreate(user)
+	if err != nil {
+		return handler.HandleHTTPError(err, c)
+	}
+	if !can {
+		return echo.ErrForbidden
+	}
+
+	// Multipart form
+	form, err := c.MultipartForm()
+	if err != nil {
+		return handler.HandleHTTPError(err, c)
+	}
+
+	type result struct {
+		Errors  []*echo.HTTPError        `json:"errors"`
+		Success []*models.TaskAttachment `json:"success"`
+	}
+	r := &result{}
+	fileHeaders := form.File["files"]
+	for _, file := range fileHeaders {
+		// We create a new attachment object here to have a clean start
+		ta := &models.TaskAttachment{
+			TaskID: taskAttachment.TaskID,
+		}
+
+		f, err := file.Open()
+		if err != nil {
+			r.Errors = append(r.Errors, handler.HandleHTTPError(err, c))
+			continue
+		}
+		defer f.Close()
+
+		err = ta.NewAttachment(f, file.Filename, file.Size, user)
+		if err != nil {
+			r.Errors = append(r.Errors, handler.HandleHTTPError(err, c))
+			continue
+		}
+		r.Success = append(r.Success, ta)
+	}
+
+	return c.JSON(http.StatusOK, r)
+}
+
+// GetTaskAttachment returns a task attachment to download for the user
+// @Summary Get one attachment.
+// @Description Get one attachment for download. **Returns json on error.**
+// @tags task
+// @Produce octet-stream
+// @Param id path int true "Task ID"
+// @Param attachmentID path int true "Attachment ID"
+// @Security JWTKeyAuth
+// @Success 200 {} string "The attachment file."
+// @Failure 403 {object} models.Message "No access to this task."
+// @Failure 404 {object} models.Message "The task does not exist."
+// @Failure 500 {object} models.Message "Internal error"
+// @Router /tasks/{id}/attachments/{attachmentID} [get]
+func GetTaskAttachment(c echo.Context) error {
+
+	var taskAttachment models.TaskAttachment
+	if err := c.Bind(&taskAttachment); err != nil {
+		return echo.NewHTTPError(http.StatusBadRequest, "No task ID provided")
+	}
+
+	// Rights check
+	user, err := models.GetCurrentUser(c)
+	if err != nil {
+		return handler.HandleHTTPError(err, c)
+	}
+	can, err := taskAttachment.CanRead(user)
+	if err != nil {
+		return handler.HandleHTTPError(err, c)
+	}
+	if !can {
+		return echo.ErrForbidden
+	}
+
+	// Get the attachment incl file
+	err = taskAttachment.ReadOne()
+	if err != nil {
+		return handler.HandleHTTPError(err, c)
+	}
+
+	// Open an send the file to the client
+	err = taskAttachment.File.LoadFileByID()
+	if err != nil {
+		return handler.HandleHTTPError(err, c)
+	}
+
+	http.ServeContent(c.Response(), c.Request(), taskAttachment.File.Name, taskAttachment.File.Created, taskAttachment.File.File)
+	return nil
+}