From 40dd0e9898bf2a88e51d497c46d826ea8f7326f4 Mon Sep 17 00:00:00 2001
From: shinnosuke <tantao@1hoper.com>
Date: 星期四, 20 八月 2026 09:37:15 +0800
Subject: [PATCH] fix: connect premium merchants and restrict approval PDFs
---
talent-card-server/src/main/java/com/talentcard/server/upload/ImageUploadService.java | 32 ++++++++++++++++++++++++++++++++
1 files changed, 32 insertions(+), 0 deletions(-)
diff --git a/talent-card-server/src/main/java/com/talentcard/server/upload/ImageUploadService.java b/talent-card-server/src/main/java/com/talentcard/server/upload/ImageUploadService.java
index 92546d8..88fcb51 100644
--- a/talent-card-server/src/main/java/com/talentcard/server/upload/ImageUploadService.java
+++ b/talent-card-server/src/main/java/com/talentcard/server/upload/ImageUploadService.java
@@ -19,6 +19,7 @@
public class ImageUploadService {
private static final long MAX_IMAGE_SIZE = 10L * 1024 * 1024;
+ private static final long MAX_PDF_SIZE = 20L * 1024 * 1024;
private final Path uploadDirectory;
@@ -56,6 +57,37 @@
return new ImageUploadResult("/uploads/" + filename);
}
+ public ImageUploadResult uploadPdf(MultipartFile file) {
+ if (file == null || file.isEmpty()) {
+ throw new BusinessException(ErrorCode.BAD_REQUEST, "请选择 PDF 文件");
+ }
+ if (file.getSize() > MAX_PDF_SIZE) {
+ throw new BusinessException(ErrorCode.BAD_REQUEST, "PDF 文件大小不能超过 20 MB");
+ }
+ try (InputStream input = file.getInputStream()) {
+ byte[] header = input.readNBytes(5);
+ if (header.length < 5 || header[0] != '%' || header[1] != 'P' || header[2] != 'D' || header[3] != 'F' || header[4] != '-') {
+ throw new BusinessException(ErrorCode.BAD_REQUEST, "仅支持 PDF 文件");
+ }
+ } catch (IOException exception) {
+ throw new BusinessException(ErrorCode.BAD_REQUEST, "无法读取 PDF 文件");
+ }
+ String contentType = file.getContentType() == null ? "" : file.getContentType().toLowerCase(Locale.ROOT);
+ if (!contentType.isBlank() && !"application/pdf".equals(contentType) && !"application/octet-stream".equals(contentType)) {
+ throw new BusinessException(ErrorCode.BAD_REQUEST, "仅支持 PDF 文件");
+ }
+ String filename = UUID.randomUUID() + ".pdf";
+ try {
+ Files.createDirectories(uploadDirectory);
+ Path destination = uploadDirectory.resolve(filename).normalize();
+ if (!destination.startsWith(uploadDirectory)) throw new BusinessException(ErrorCode.BAD_REQUEST, "Invalid PDF filename");
+ Files.copy(file.getInputStream(), destination, StandardCopyOption.REPLACE_EXISTING);
+ } catch (IOException exception) {
+ throw new BusinessException(ErrorCode.INTERNAL_ERROR, "保存 PDF 文件失败");
+ }
+ return new ImageUploadResult("/uploads/" + filename);
+ }
+
private String detectImageExtension(MultipartFile file) {
byte[] header = new byte[12];
try (InputStream input = file.getInputStream()) {
--
Gitblit v1.7.1