import { readMultipartFormData } from 'h3' import type { FileItem, FileUploadResponse } from '~/types/file' import type { UploadErrorItem } from '~/types/image' import { getUploadUserId, requireUploadAuth, verifyApiUploadToken } from '../../utils/access' import { MAX_FILES_PER_UPLOAD } from '../../utils/constants' import { createApiError } from '../../utils/api-error' import { checkUploadRateLimit } from '../../utils/rate-limit' import { processSingleFileUpload } from '../../utils/file-bed' import { getFileBedAccessMode } from '../../utils/env' export default defineEventHandler(async (event) => { await requireUploadAuth(event) const formData = await readMultipartFormData(event) if (!formData?.length) { createApiError(event, 'INVALID_REQUEST', '未收到上传文件', 400) } const tokenField = formData.find(part => part.name === 'token') const formToken = tokenField?.data?.length ? new TextDecoder().decode(tokenField.data).trim() : '' checkUploadRateLimit(event, formToken) const source = verifyApiUploadToken(event) ? 'api' : 'web' const uploadUserId = await getUploadUserId(event, formToken) const fileParts = formData.filter( part => (part.name === 'file' || part.name === 'files') && part.data?.length ) if (!fileParts.length) { createApiError(event, 'INVALID_REQUEST', '未收到上传文件', 400) } if (fileParts.length > MAX_FILES_PER_UPLOAD) { createApiError( event, 'TOO_MANY_FILES', `每次最多上传 ${MAX_FILES_PER_UPLOAD} 个文件`, 400 ) } const items: FileItem[] = [] const errors: UploadErrorItem[] = [] for (const part of fileParts) { const result = await processSingleFileUpload(event, { bytes: new Uint8Array(part.data), filename: part.filename, contentType: part.type, source, userId: uploadUserId }) if ('error' in result) { errors.push(result.error) } else { items.push(result.item) } } const response: FileUploadResponse = { success: items.length > 0, items, errors, accessMode: getFileBedAccessMode() } if (!items.length && errors.length) { setResponseStatus(event, 400) } return response })