mirror of
https://gitlab.com/mbugroup/lti-api.git
synced 2026-05-20 13:31:56 +00:00
Merge branch 'fix/daily-checklist' into 'development'
[FIX][BE]: add validation max size upload file 5 MB See merge request mbugroup/lti-api!289
This commit is contained in:
@@ -2,6 +2,7 @@ package controller
|
|||||||
|
|
||||||
import (
|
import (
|
||||||
"math"
|
"math"
|
||||||
|
"mime/multipart"
|
||||||
"strconv"
|
"strconv"
|
||||||
|
|
||||||
"gitlab.com/mbugroup/lti-api.git/internal/modules/daily-checklists/dto"
|
"gitlab.com/mbugroup/lti-api.git/internal/modules/daily-checklists/dto"
|
||||||
@@ -362,6 +363,9 @@ func (u *DailyChecklistController) UpdateOne(c *fiber.Ctx) error {
|
|||||||
return fiber.NewError(fiber.StatusBadRequest, "Invalid multipart form")
|
return fiber.NewError(fiber.StatusBadRequest, "Invalid multipart form")
|
||||||
}
|
}
|
||||||
req.Documents = form.File["documents"]
|
req.Documents = form.File["documents"]
|
||||||
|
if err := validateDailyChecklistDocumentSizes(req.Documents); err != nil {
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
|
||||||
if err := c.BodyParser(req); err != nil {
|
if err := c.BodyParser(req); err != nil {
|
||||||
return fiber.NewError(fiber.StatusBadRequest, "Invalid request body")
|
return fiber.NewError(fiber.StatusBadRequest, "Invalid request body")
|
||||||
@@ -381,6 +385,16 @@ func (u *DailyChecklistController) UpdateOne(c *fiber.Ctx) error {
|
|||||||
})
|
})
|
||||||
}
|
}
|
||||||
|
|
||||||
|
func validateDailyChecklistDocumentSizes(files []*multipart.FileHeader) error {
|
||||||
|
const maxDailyChecklistDocumentBytes = 5 * 1024 * 1024 // 5MB
|
||||||
|
for _, file := range files {
|
||||||
|
if file != nil && file.Size > maxDailyChecklistDocumentBytes {
|
||||||
|
return fiber.NewError(fiber.StatusRequestEntityTooLarge, "Document size must be <= 5MB")
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return nil
|
||||||
|
}
|
||||||
|
|
||||||
func (u *DailyChecklistController) DeleteOne(c *fiber.Ctx) error {
|
func (u *DailyChecklistController) DeleteOne(c *fiber.Ctx) error {
|
||||||
param := c.Params("idDailyChecklist")
|
param := c.Params("idDailyChecklist")
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user