mirror of
https://github.com/zulip/zulip.git
synced 2025-11-03 21:43:21 +00:00
37 lines
1.2 KiB
Python
37 lines
1.2 KiB
Python
import re
|
|
|
|
from django.contrib.auth.models import AnonymousUser
|
|
from django.http import HttpRequest, HttpResponseBase, HttpResponseForbidden
|
|
|
|
from zerver.lib.typed_endpoint import typed_endpoint
|
|
from zerver.models import UserProfile
|
|
from zerver.views.upload import serve_file
|
|
|
|
|
|
@typed_endpoint
|
|
def backend_serve_thumbnail(
|
|
request: HttpRequest,
|
|
maybe_user_profile: UserProfile | AnonymousUser,
|
|
*,
|
|
size: str,
|
|
url: str,
|
|
) -> HttpResponseBase:
|
|
# This URL used to be passed arbitrary URLs, and pass them through
|
|
# Camo; we no longer support doing so, and instead return a 403.
|
|
#
|
|
# Modern thumbnailing uses URLs of the style
|
|
# `/user_uploads/thumbnail/.../300x200.webp`; this endpoint is
|
|
# kept for backward compatibility, and for future extension for
|
|
# thumbnailing external URLs.
|
|
upload_path_parts = re.match(r"user_uploads/(\d+)/(.*)", url)
|
|
if not upload_path_parts:
|
|
return HttpResponseForbidden()
|
|
|
|
realm_id_str = upload_path_parts[1]
|
|
path_id = upload_path_parts[2]
|
|
|
|
# We do not have ImageAttachment rows for historical uploads, so
|
|
# we cannot serve a "new" thumbnail for these requests; serve the
|
|
# full-size file.
|
|
return serve_file(request, maybe_user_profile, realm_id_str, path_id)
|