feature: save uploaded files to album if specified

1 files changed, 21 insertions, 7 deletions

diff --git a/src/api/routes/uploads/uploadPOST.js b/src/api/routes/uploads/uploadPOST.js
index 06959f4..3411abc 100644
--- a/src/api/routes/uploads/uploadPOST.js
+++ b/src/api/routes/uploads/uploadPOST.js
@@ -31,19 +31,20 @@ class uploadPOST extends Route {
 		const user = await Util.isAuthorized(req);
 		if (!user && process.env.PUBLIC_MODE == 'false') return res.status(401).json({ message: 'Not authorized to use this resource' });
 
+		const albumId = req.body.albumid || req.headers.albumid;
+		if (albumId && !user) return res.status(401).json({ message: 'Only registered users can upload files to an album' });
+		if (albumId && user) {
+			const album = await db.table('albums').where({ id: albumId, userId: user.id }).first();
+			if (!album) return res.status(401).json({ message: 'Album doesn\'t exist or it doesn\'t belong to the user' });
+		}
+
 		return upload(req, res, async err => {
 			if (err) console.error(err.message);
 
-			const albumId = req.body.albumid || req.headers.albumid;
-			if (albumId && !user) return res.status(401).json({ message: 'Only registered users can upload files to an album' });
-			if (albumId && user) {
-				const album = await db.table('albums').where({ id: albumId, userId: user.id }).first();
-				if (!album) return res.status(401).json({ message: 'Album doesn\'t exist or it doesn\'t belong to the user' });
-			}
-
 			let uploadedFile = {};
 			let originalFile;
 			let insertedId;
+			const now = moment.utc().toDate();
 
 			const remappedKeys = this._remapKeys(req.body);
 			for (const file of req.files) {
@@ -87,6 +88,19 @@ class uploadPOST extends Route {
 				uploadedFile.deleteUrl = `${process.env.DOMAIN}/api/file/${insertedId[0]}`;
 			}
 
+			/*
+				If the upload had an album specified we make sure to create the relation
+				and update the according timestamps..
+			*/
+			if (albumId) {
+				try {
+					await db.table('albumsFiles').insert({ albumId, fileId: insertedId[0] });
+					await db.table('albums').where('id', albumId).update('editedAt', now);
+				} catch (error) {
+					console.error(error);
+				}
+			}
+
 			return res.status(201).send({
 				message: 'Sucessfully uploaded the file.',
 				...uploadedFile