not-your-blog-v2/cloudflare-worker/src/index.js

74 lines
2.1 KiB
JavaScript

import { S3Client, PutObjectCommand } from '@aws-sdk/client-s3';
import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
function corsHeaders(origin, allowedOrigin) {
const allow = allowedOrigin || '*';
return {
'Access-Control-Allow-Origin': allow,
'Access-Control-Allow-Methods': 'GET, OPTIONS',
'Access-Control-Allow-Headers': 'Authorization',
};
}
function json(data, status, headers) {
return new Response(JSON.stringify(data), {
status: status || 200,
headers: { 'Content-Type': 'application/json', ...headers },
});
}
export default {
async fetch(request, env) {
const cors = corsHeaders(request.headers.get('Origin'), env.ALLOWED_ORIGIN);
if (request.method === 'OPTIONS') {
return new Response(null, { status: 204, headers: cors });
}
const url = new URL(request.url);
if (url.pathname !== '/presign') {
return new Response('Not found', { status: 404, headers: cors });
}
if (request.method !== 'GET') {
return new Response('Method not allowed', { status: 405, headers: cors });
}
const auth = request.headers.get('Authorization');
if (!auth || auth !== `Bearer ${env.UPLOAD_SECRET}`) {
return json({ error: 'Unauthorized' }, 401, cors);
}
const filename = url.searchParams.get('filename');
if (!filename) {
return json({ error: 'Missing filename parameter' }, 400, cors);
}
const safe = filename.replace(/[^a-zA-Z0-9.\-_]/g, '_');
const key = `videos/${Date.now()}-${safe}`;
const client = new S3Client({
region: 'auto',
endpoint: `https://${env.R2_ACCOUNT_ID}.r2.cloudflarestorage.com`,
credentials: {
accessKeyId: env.R2_ACCESS_KEY_ID,
secretAccessKey: env.R2_SECRET_ACCESS_KEY,
},
});
try {
const command = new PutObjectCommand({
Bucket: env.R2_BUCKET_NAME,
Key: key,
});
const presignedUrl = await getSignedUrl(client, command, { expiresIn: 3600 });
return json({ url: presignedUrl, key }, 200, cors);
} catch (err) {
return json({ error: err.message }, 500, cors);
}
},
};