feature: Added file downloads from extension folder

Author: dogukanoksuz

app/handlers/file.go

@@ -2,11 +2,14 @@ package handlers
 
 import (
 	"path/filepath"
+	"strings"
 
 	"github.com/gofiber/fiber/v2"
 	"github.com/limanmys/render-engine/app/models"
 	"github.com/limanmys/render-engine/internal/bridge"
 	"github.com/limanmys/render-engine/internal/liman"
+	"github.com/limanmys/render-engine/internal/sandbox"
+	"github.com/limanmys/render-engine/pkg/helpers"
 	"github.com/limanmys/render-engine/pkg/logger"
 )
 
@@ -109,3 +112,78 @@ func GetFile(c *fiber.Ctx) error {
 		"message": "file transfer completed successfully"
 	}`)
 }
+
+func DownloadFile(c *fiber.Ctx) error {
+	params := []string{"server_id", "path", "extension_id"}
+
+	for _, param := range params {
+		if len(c.FormValue(param)) < 1 {
+			return logger.FiberError(fiber.StatusBadRequest, param+" parameter is missing")
+		}
+	}
+	if len(c.FormValue("extension_id")) < 1 {
+		return logger.FiberError(fiber.StatusBadRequest, "extension not found")
+	}
+
+	extension, err := liman.GetExtension(&models.Extension{
+		ID: c.FormValue("extension_id"),
+	})
+
+	if err != nil {
+		return err
+	}
+
+	if extension.Status == "0" {
+		return logger.FiberError(fiber.StatusServiceUnavailable, "extension is unavailable")
+	}
+
+	credentials := &models.Credentials{}
+	if extension.RequireKey == "true" {
+		credentials, err = liman.GetCredentials(
+			&models.User{
+				ID: c.Locals("user_id").(string),
+			},
+			&models.Server{
+				ID: c.FormValue("server_id"),
+			},
+		)
+
+		if err != nil || len(credentials.Username) < 1 {
+			return logger.FiberError(fiber.StatusForbidden, "you need a key to use this extension")
+		}
+	}
+
+	formValues := helpers.GetFormData(c)
+
+	token := c.FormValue("token")
+	if len(c.FormValue("liman-token")) > 0 {
+		token = c.FormValue("liman-token")
+	}
+
+	_, err = sandbox.GenerateCommand(
+		extension,
+		credentials,
+		&models.CommandParams{
+			TargetFunction: "",
+			User:           c.Locals("user_id").(string),
+			Extension:      c.FormValue("extension_id"),
+			Server:         c.FormValue("server_id"),
+			RequestData:    formValues,
+			Token:          token,
+			BaseURL:        c.FormValue("lmnbaseurl", c.Get("origin")),
+			Locale:         c.FormValue("locale", helpers.Env("APP_LANG", "tr")),
+			LogID:          c.Locals("log_id").(string),
+		},
+	)
+	if err != nil {
+		return err
+	}
+
+	path := filepath.Clean(c.FormValue("path"))
+	path = "/liman/extensions/" + strings.ToLower(extension.Name) + path
+	path = strings.ReplaceAll(path, "../", "/")
+	path = strings.ReplaceAll(path, "./", "/")
+	path = strings.ReplaceAll(path, "..", "")
+
+	return c.Download(path)
+}

app/routes/index.go

@@ -20,6 +20,7 @@ func Install(app *fiber.App) {
 	// file
 	app.Post("/getFile", handlers.GetFile)
 	app.Post("/putFile", handlers.PutFile)
+	app.Get("/download", handlers.DownloadFile)
 
 	// script
 	app.Post("/script", handlers.ScriptRunner)

go.mod

@@ -3,22 +3,22 @@ module github.com/limanmys/render-engine
 go 1.19
 
 require (
-	github.com/gofiber/fiber/v2 v2.37.1
-	github.com/gofiber/helmet/v2 v2.2.16
+	github.com/gofiber/fiber/v2 v2.40.1
+	github.com/gofiber/helmet/v2 v2.2.22
 	github.com/google/uuid v1.3.0
 	github.com/joho/godotenv v1.4.0
-	go.uber.org/zap v1.23.0
-	gorm.io/driver/mysql v1.3.6
-	gorm.io/driver/postgres v1.3.9
-	gorm.io/gorm v1.23.9
+	go.uber.org/zap v1.24.0
+	gorm.io/driver/mysql v1.4.4
+	gorm.io/driver/postgres v1.4.5
+	gorm.io/gorm v1.24.2
 )
 
 require (
-	github.com/Azure/go-ntlmssp v0.0.0-20220621081337-cb9428e4ac1e // indirect
+	github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 // indirect
 	github.com/ChrisTrenkamp/goxpath v0.0.0-20210404020558-97928f7e12b6 // indirect
 	github.com/benbjohnson/clock v1.3.0 // indirect
 	github.com/geoffgarside/ber v1.1.0 // indirect
-	github.com/gofrs/uuid v4.3.0+incompatible // indirect
+	github.com/gofrs/uuid v4.3.1+incompatible // indirect
 	github.com/hashicorp/go-uuid v1.0.3 // indirect
 	github.com/jcmturner/aescts/v2 v2.0.0 // indirect
 	github.com/jcmturner/dnsutils/v2 v2.0.0 // indirect
@@ -29,41 +29,45 @@ require (
 	github.com/kr/fs v0.1.0 // indirect
 	github.com/kr/pretty v0.3.0 // indirect
 	github.com/masterzen/simplexml v0.0.0-20190410153822-31eea3082786 // indirect
+	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/mattn/go-isatty v0.0.16 // indirect
+	github.com/mattn/go-runewidth v0.0.14 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
+	github.com/rivo/uniseg v0.4.3 // indirect
 	github.com/rogpeppe/go-internal v1.8.1 // indirect
 	go.uber.org/atomic v1.10.0 // indirect
 	go.uber.org/goleak v1.1.12 // indirect
-	go.uber.org/multierr v1.8.0 // indirect
-	golang.org/x/net v0.0.0-20220909164309-bea034e7d591 // indirect
-	golang.org/x/term v0.0.0-20220722155259-a9ba230a4035 // indirect
+	go.uber.org/multierr v1.9.0 // indirect
+	golang.org/x/net v0.4.0 // indirect
+	golang.org/x/term v0.3.0 // indirect
 	gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
 )
 
 require (
 	github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d
 	github.com/alessio/shellescape v1.4.1
 	github.com/andybalholm/brotli v1.0.4 // indirect
-	github.com/go-sql-driver/mysql v1.6.0 // indirect
+	github.com/go-sql-driver/mysql v1.7.0 // indirect
 	github.com/hirochachacha/go-smb2 v1.1.0
 	github.com/jackc/chunkreader/v2 v2.0.1 // indirect
 	github.com/jackc/pgconn v1.13.0 // indirect
 	github.com/jackc/pgio v1.0.0 // indirect
 	github.com/jackc/pgpassfile v1.0.0 // indirect
 	github.com/jackc/pgproto3/v2 v2.3.1 // indirect
 	github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b // indirect
-	github.com/jackc/pgtype v1.12.0 // indirect
+	github.com/jackc/pgtype v1.13.0 // indirect
 	github.com/jackc/pgx/v4 v4.17.2 // indirect
 	github.com/jinzhu/inflection v1.0.0 // indirect
 	github.com/jinzhu/now v1.1.5 // indirect
-	github.com/klauspost/compress v1.15.10 // indirect
-	github.com/masterzen/winrm v0.0.0-20220513085036-69f69afcd9e9
+	github.com/klauspost/compress v1.15.13 // indirect
+	github.com/masterzen/winrm v0.0.0-20220917170901-b07f6cb0598d
 	github.com/mervick/aes-everywhere/go/aes256 v0.0.0-20220903070135-f13ed3789ae1
 	github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5
 	github.com/pkg/sftp v1.13.5
 	github.com/valyala/bytebufferpool v1.0.0 // indirect
-	github.com/valyala/fasthttp v1.40.0 // indirect
+	github.com/valyala/fasthttp v1.43.0 // indirect
 	github.com/valyala/tcplisten v1.0.0 // indirect
-	golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90
-	golang.org/x/sys v0.0.0-20220915200043-7b5979e65e41 // indirect
-	golang.org/x/text v0.3.7
+	golang.org/x/crypto v0.4.0
+	golang.org/x/sys v0.3.0 // indirect
+	golang.org/x/text v0.5.0
 )