add: allow supporters to upload gif avatars/banners

This commit is contained in:
trisua 2025-05-04 16:19:34 -04:00
parent cf38022597
commit e727de9c63
10 changed files with 231 additions and 52 deletions

View file

@ -12,7 +12,7 @@ use std::{fs::File, io::BufWriter};
/// * `image/jpeg` /// * `image/jpeg`
/// * `image/avif` /// * `image/avif`
/// * `image/webp` /// * `image/webp`
pub struct Image(pub Bytes); pub struct Image(pub Bytes, pub String);
impl<S> FromRequest<S> for Image impl<S> FromRequest<S> for Image
where where
@ -26,11 +26,10 @@ where
return Err(StatusCode::BAD_REQUEST); return Err(StatusCode::BAD_REQUEST);
}; };
let body = if content_type let content_type = content_type.to_str().unwrap();
.to_str() let content_type_string = content_type.to_string();
.unwrap()
.starts_with("multipart/form-data") let body = if content_type.starts_with("multipart/form-data") {
{
let mut multipart = Multipart::from_request(req, state) let mut multipart = Multipart::from_request(req, state)
.await .await
.map_err(|_| StatusCode::BAD_REQUEST)?; .map_err(|_| StatusCode::BAD_REQUEST)?;
@ -53,12 +52,12 @@ where
return Err(StatusCode::BAD_REQUEST); return Err(StatusCode::BAD_REQUEST);
}; };
Ok(Self(body)) Ok(Self(body, content_type_string))
} }
} }
/// Create an AVIF buffer given an input of `bytes` /// Create an image buffer given an input of `bytes`
pub fn save_avif_buffer(path: &str, bytes: Vec<u8>) -> std::io::Result<()> { pub fn save_buffer(path: &str, bytes: Vec<u8>, format: image::ImageFormat) -> std::io::Result<()> {
let pre_img_buffer = match image::load_from_memory(&bytes) { let pre_img_buffer = match image::load_from_memory(&bytes) {
Ok(i) => i, Ok(i) => i,
Err(_) => { Err(_) => {
@ -72,10 +71,7 @@ pub fn save_avif_buffer(path: &str, bytes: Vec<u8>) -> std::io::Result<()> {
let file = File::create(path)?; let file = File::create(path)?;
let mut writer = BufWriter::new(file); let mut writer = BufWriter::new(file);
if pre_img_buffer if pre_img_buffer.write_to(&mut writer, format).is_err() {
.write_to(&mut writer, image::ImageFormat::Avif)
.is_err()
{
return Err(std::io::Error::new( return Err(std::io::Error::new(
std::io::ErrorKind::Other, std::io::ErrorKind::Other,
"Image conversion failed", "Image conversion failed",

View file

@ -1,5 +1,5 @@
mod assets; mod assets;
mod avif; mod image;
mod macros; mod macros;
mod routes; mod routes;
mod sanitize; mod sanitize;

View file

@ -311,7 +311,7 @@
id="avatar_file" id="avatar_file"
name="file" name="file"
type="file" type="file"
accept="image/png,image/jpeg,image/avif,image/webp" accept="image/png,image/jpeg,image/avif,image/webp,image/gif"
class="w-content" class="w-content"
/> />
@ -319,9 +319,7 @@
</div> </div>
<span class="fade" <span class="fade"
>Images must be less than 8 MB large. Animated images >Images must be less than 8 MB large. Animated GIFs are only supported for supporter users. GIFs can be at most 2 MB large.</span
such as GIFs or APNGs will not work because of all
images being formatted as AVIF.</span
> >
</form> </form>
</div> </div>
@ -1071,7 +1069,7 @@
"color", "color",
{ {
description: description:
"Text on elements with the surface backgrounds.", "Text on elements with the surface background.",
}, },
], ],
[ [

View file

@ -845,7 +845,7 @@ media_theme_pref();
onchange="window.update_field_with_color('${option.key}', event.target.value)" onchange="window.update_field_with_color('${option.key}', event.target.value)"
value="${option.value}" value="${option.value}"
id="${option.key}/color" id="${option.key}/color"
style="width: 4rem" style="width: 4rem; height: 32px"
/> />
<input <input
@ -856,6 +856,7 @@ media_theme_pref();
id="${option.key}" id="${option.key}"
value="${option.value}" value="${option.value}"
class="w-full" class="w-full"
style="height: 32px"
/> />
</div> </div>

View file

@ -11,11 +11,11 @@ use std::{
fs::{File, exists}, fs::{File, exists},
io::Read, io::Read,
}; };
use tetratto_core::model::{ApiReturn, Error}; use tetratto_core::model::{permissions::FinePermission, ApiReturn, Error};
use crate::{ use crate::{
State, State,
avif::{Image, save_avif_buffer}, image::{Image, save_buffer},
get_user_from_token, get_user_from_token,
}; };
@ -55,14 +55,14 @@ pub async fn avatar_request(
data.get_user_by_id(match selector.parse::<usize>() { data.get_user_by_id(match selector.parse::<usize>() {
Ok(d) => d, Ok(d) => d,
Err(_) => { Err(_) => {
return ( return Err((
[("Content-Type", "image/svg+xml")], [("Content-Type", "image/svg+xml")],
Body::from(read_image(PathBufD::current().extend(&[ Body::from(read_image(PathBufD::current().extend(&[
data.0.dirs.media.as_str(), data.0.dirs.media.as_str(),
"images", "images",
"default-avatar.svg", "default-avatar.svg",
]))), ]))),
); ));
} }
}) })
.await .await
@ -71,38 +71,45 @@ pub async fn avatar_request(
} { } {
Ok(ua) => ua, Ok(ua) => ua,
Err(_) => { Err(_) => {
return ( return Err((
[("Content-Type", "image/svg+xml")], [("Content-Type", "image/svg+xml")],
Body::from(read_image(PathBufD::current().extend(&[ Body::from(read_image(PathBufD::current().extend(&[
data.0.dirs.media.as_str(), data.0.dirs.media.as_str(),
"images", "images",
"default-avatar.svg", "default-avatar.svg",
]))), ]))),
); ));
} }
}; };
let path = PathBufD::current().extend(&[ let path = PathBufD::current().extend(&[
data.0.dirs.media.as_str(), data.0.dirs.media.as_str(),
"avatars", "avatars",
&format!("{}.avif", &(user.id as i64)), &format!(
"{}.{}",
&(user.id as i64),
user.settings.avatar_mime.replace("image/", "")
),
]); ]);
if !exists(&path).unwrap() { if !exists(&path).unwrap() {
return ( return Err((
[("Content-Type", "image/svg+xml")], [("Content-Type", "image/svg+xml")],
Body::from(read_image(PathBufD::current().extend(&[ Body::from(read_image(PathBufD::current().extend(&[
data.0.dirs.media.as_str(), data.0.dirs.media.as_str(),
"images", "images",
"default-avatar.svg", "default-avatar.svg",
]))), ]))),
); ));
} }
( Ok((
[("Content-Type", "image/avif")], [(
"Content-Type".to_string(),
user.settings.avatar_mime.clone(),
)],
Body::from(read_image(path)), Body::from(read_image(path)),
) ))
} }
/// Get a profile's banner image /// Get a profile's banner image
@ -116,41 +123,49 @@ pub async fn banner_request(
let user = match data.get_user_by_username(&username).await { let user = match data.get_user_by_username(&username).await {
Ok(ua) => ua, Ok(ua) => ua,
Err(_) => { Err(_) => {
return ( return Err((
[("Content-Type", "image/svg+xml")], [("Content-Type", "image/svg+xml")],
Body::from(read_image(PathBufD::current().extend(&[ Body::from(read_image(PathBufD::current().extend(&[
data.0.dirs.media.as_str(), data.0.dirs.media.as_str(),
"images", "images",
"default-banner.svg", "default-banner.svg",
]))), ]))),
); ));
} }
}; };
let path = PathBufD::current().extend(&[ let path = PathBufD::current().extend(&[
data.0.dirs.media.as_str(), data.0.dirs.media.as_str(),
"banners", "banners",
&format!("{}.avif", &(user.id as i64)), &format!(
"{}.{}",
&(user.id as i64),
user.settings.banner_mime.replace("image/", "")
),
]); ]);
if !exists(&path).unwrap() { if !exists(&path).unwrap() {
return ( return Err((
[("Content-Type", "image/svg+xml")], [("Content-Type", "image/svg+xml")],
Body::from(read_image(PathBufD::current().extend(&[ Body::from(read_image(PathBufD::current().extend(&[
data.0.dirs.media.as_str(), data.0.dirs.media.as_str(),
"images", "images",
"default-banner.svg", "default-banner.svg",
]))), ]))),
); ));
} }
( Ok((
[("Content-Type", "image/avif")], [(
"Content-Type".to_string(),
user.settings.banner_mime.clone(),
)],
Body::from(read_image(path)), Body::from(read_image(path)),
) ))
} }
pub static MAXIUMUM_FILE_SIZE: usize = 8388608; pub static MAXIUMUM_FILE_SIZE: usize = 8388608;
pub static MAXIUMUM_GIF_FILE_SIZE: usize = 2097152;
/// Upload avatar /// Upload avatar
pub async fn upload_avatar_request( pub async fn upload_avatar_request(
@ -160,12 +175,65 @@ pub async fn upload_avatar_request(
) -> impl IntoResponse { ) -> impl IntoResponse {
// get user from token // get user from token
let data = &(data.read().await).0; let data = &(data.read().await).0;
let auth_user = match get_user_from_token!(jar, data) { let mut auth_user = match get_user_from_token!(jar, data) {
Some(ua) => ua, Some(ua) => ua,
None => return Json(Error::NotAllowed.into()), None => return Json(Error::NotAllowed.into()),
}; };
let path = pathd!("{}/avatars/{}.avif", data.0.dirs.media, &auth_user.id); if img.1 == "image/gif" && !auth_user.permissions.check(FinePermission::SUPPORTER) {
return Json(Error::RequiresSupporter.into());
}
let mime = if img.1 == "image/gif" {
"image/gif"
} else {
"image/avif"
};
if auth_user.settings.avatar_mime != mime {
// mime changed; delete old image
let path = pathd!(
"{}/avatars/{}.{}",
data.0.dirs.media,
&auth_user.id,
auth_user.settings.avatar_mime.replace("image/", "")
);
if std::fs::exists(&path).unwrap() {
std::fs::remove_file(path).unwrap();
}
}
let path = pathd!(
"{}/avatars/{}.{}",
data.0.dirs.media,
&auth_user.id,
mime.replace("image/", "")
);
// update user settings
auth_user.settings.avatar_mime = mime.to_string();
if let Err(e) = data
.update_user_settings(auth_user.id, auth_user.settings)
.await
{
return Json(e.into());
}
// upload image (gif)
if mime == "image/gif" {
// gif image, don't encode
if img.0.len() > MAXIUMUM_GIF_FILE_SIZE {
return Json(Error::DataTooLong("gif".to_string()).into());
}
std::fs::write(&path, img.0).unwrap();
return Json(ApiReturn {
ok: true,
message: "Avatar uploaded. It might take a bit to update".to_string(),
payload: (),
});
}
// check file size // check file size
if img.0.len() > MAXIUMUM_FILE_SIZE { if img.0.len() > MAXIUMUM_FILE_SIZE {
@ -179,7 +247,15 @@ pub async fn upload_avatar_request(
bytes.push(byte); bytes.push(byte);
} }
match save_avif_buffer(&path, bytes) { match save_buffer(
&path,
bytes,
if mime == "image/gif" {
image::ImageFormat::Gif
} else {
image::ImageFormat::Avif
},
) {
Ok(_) => Json(ApiReturn { Ok(_) => Json(ApiReturn {
ok: true, ok: true,
message: "Avatar uploaded. It might take a bit to update".to_string(), message: "Avatar uploaded. It might take a bit to update".to_string(),
@ -197,12 +273,63 @@ pub async fn upload_banner_request(
) -> impl IntoResponse { ) -> impl IntoResponse {
// get user from token // get user from token
let data = &(data.read().await).0; let data = &(data.read().await).0;
let auth_user = match get_user_from_token!(jar, data) { let mut auth_user = match get_user_from_token!(jar, data) {
Some(ua) => ua, Some(ua) => ua,
None => return Json(Error::NotAllowed.into()), None => return Json(Error::NotAllowed.into()),
}; };
let path = pathd!("{}/banners/{}.avif", data.0.dirs.media, &auth_user.id); if img.1 == "image/gif" && !auth_user.permissions.check(FinePermission::SUPPORTER) {
return Json(Error::RequiresSupporter.into());
}
let mime = if img.1 == "image/gif" {
"image/gif"
} else {
"image/avif"
};
if auth_user.settings.banner_mime != mime {
// mime changed; delete old image
let path = pathd!(
"{}/banners/{}.{}",
data.0.dirs.media,
&auth_user.id,
auth_user.settings.banner_mime.replace("image/", "")
);
std::fs::remove_file(path).unwrap();
}
let path = pathd!(
"{}/banners/{}.{}",
data.0.dirs.media,
&auth_user.id,
mime.replace("image/", "")
);
// update user settings
auth_user.settings.banner_mime = mime.to_string();
if let Err(e) = data
.update_user_settings(auth_user.id, auth_user.settings)
.await
{
return Json(e.into());
}
// upload image (gif)
if mime == "image/gif" {
// gif image, don't encode
if img.0.len() > MAXIUMUM_GIF_FILE_SIZE {
return Json(Error::DataTooLong("gif".to_string()).into());
}
std::fs::write(&path, img.0).unwrap();
return Json(ApiReturn {
ok: true,
message: "Banner uploaded. It might take a bit to update".to_string(),
payload: (),
});
}
// check file size // check file size
if img.0.len() > MAXIUMUM_FILE_SIZE { if img.0.len() > MAXIUMUM_FILE_SIZE {
@ -216,7 +343,15 @@ pub async fn upload_banner_request(
bytes.push(byte); bytes.push(byte);
} }
match save_avif_buffer(&path, bytes) { match save_buffer(
&path,
bytes,
if mime == "image/gif" {
image::ImageFormat::Gif
} else {
image::ImageFormat::Avif
},
) {
Ok(_) => Json(ApiReturn { Ok(_) => Json(ApiReturn {
ok: true, ok: true,
message: "Banner uploaded. It might take a bit to update".to_string(), message: "Banner uploaded. It might take a bit to update".to_string(),

View file

@ -6,7 +6,7 @@ use tetratto_core::model::{ApiReturn, Error, permissions::FinePermission};
use crate::{ use crate::{
State, State,
avif::{Image, save_avif_buffer}, image::{Image, save_buffer},
get_user_from_token, get_user_from_token,
routes::api::v1::auth::images::{MAXIUMUM_FILE_SIZE, read_image}, routes::api::v1::auth::images::{MAXIUMUM_FILE_SIZE, read_image},
}; };
@ -146,7 +146,7 @@ pub async fn upload_avatar_request(
bytes.push(byte); bytes.push(byte);
} }
match save_avif_buffer(&path, bytes) { match save_buffer(&path, bytes, image::ImageFormat::Avif) {
Ok(_) => Json(ApiReturn { Ok(_) => Json(ApiReturn {
ok: true, ok: true,
message: "Avatar uploaded. It might take a bit to update".to_string(), message: "Avatar uploaded. It might take a bit to update".to_string(),
@ -201,7 +201,7 @@ pub async fn upload_banner_request(
bytes.push(byte); bytes.push(byte);
} }
match save_avif_buffer(&path, bytes) { match save_buffer(&path, bytes, image::ImageFormat::Avif) {
Ok(_) => Json(ApiReturn { Ok(_) => Json(ApiReturn {
ok: true, ok: true,
message: "Banner uploaded. It might take a bit to update".to_string(), message: "Banner uploaded. It might take a bit to update".to_string(),

View file

@ -304,13 +304,21 @@ impl DataManager {
let avatar = PathBufD::current().extend(&[ let avatar = PathBufD::current().extend(&[
self.0.dirs.media.as_str(), self.0.dirs.media.as_str(),
"avatars", "avatars",
&format!("{}.avif", &(user.id as i64)), &format!(
"{}.{}",
&(user.id as i64),
user.settings.avatar_mime.replace("image/", "")
),
]); ]);
let banner = PathBufD::current().extend(&[ let banner = PathBufD::current().extend(&[
self.0.dirs.media.as_str(), self.0.dirs.media.as_str(),
"banners", "banners",
&format!("{}.avif", &(user.id as i64)), &format!(
"{}.{}",
&(user.id as i64),
user.settings.banner_mime.replace("image/", "")
),
]); ]);
if exists(&avatar).unwrap() { if exists(&avatar).unwrap() {

View file

@ -199,6 +199,16 @@ pub struct UserSettings {
/// The user's status. Shows over connection info. /// The user's status. Shows over connection info.
#[serde(default)] #[serde(default)]
pub status: String, pub status: String,
/// The mime type of the user's avatar.
#[serde(default = "mime_avif")]
pub avatar_mime: String,
/// The mime type of the user's banner.
#[serde(default = "mime_avif")]
pub banner_mime: String,
}
fn mime_avif() -> String {
"image/avif".to_string()
} }
impl Default for User { impl Default for User {

View file

@ -43,6 +43,7 @@ pub enum Error {
UsernameInUse, UsernameInUse,
TitleInUse, TitleInUse,
QuestionsDisabled, QuestionsDisabled,
RequiresSupporter,
Unknown, Unknown,
} }
@ -63,6 +64,9 @@ impl Display for Error {
Self::UsernameInUse => "Username in use".to_string(), Self::UsernameInUse => "Username in use".to_string(),
Self::TitleInUse => "Title in use".to_string(), Self::TitleInUse => "Title in use".to_string(),
Self::QuestionsDisabled => "You are not allowed to ask questions there".to_string(), Self::QuestionsDisabled => "You are not allowed to ask questions there".to_string(),
Self::RequiresSupporter => {
"Only site supporters can upload GIF files as their avatar/banner".to_string()
}
_ => format!("An unknown error as occurred: ({:?})", self), _ => format!("An unknown error as occurred: ({:?})", self),
}) })
} }

View file

@ -10,8 +10,35 @@ pub enum PkceChallengeMethod {
#[derive(Serialize, Deserialize, PartialEq, Eq)] #[derive(Serialize, Deserialize, PartialEq, Eq)]
pub enum AppScope { pub enum AppScope {
#[serde(alias = "user-read-profile")]
UserReadProfile, UserReadProfile,
UserReadSessions,
UserReadPosts,
UserReadMessages,
UserCreatePosts,
UserCreateMessages,
UserDeletePosts,
UserDeleteMessages,
}
impl AppScope {
/// Parse the given input string as a list of scopes.
pub fn parse(input: &str) -> Vec<AppScope> {
let mut out: Vec<AppScope> = Vec::new();
for scope in input.split(" ") {
out.push(match scope {
"user-read-profile" => Self::UserReadProfile,
"user-read-sessions" => Self::UserReadSessions,
"user-read-posts" => Self::UserReadPosts,
"user-read-messages" => Self::UserReadMessages,
"user-create-posts" => Self::UserCreatePosts,
"user-create-messages" => Self::UserCreateMessages,
"user-delete-posts" => Self::UserDeletePosts,
"user-delete-messages" => Self::UserDeleteMessages,
_ => continue,
})
}
out
}
} }
/// Check a verifier against the stored challenge (using the given [`PkceChallengeMethod`]). /// Check a verifier against the stored challenge (using the given [`PkceChallengeMethod`]).