From 179c4d64313c9b7572778da4aaaf6c6584fe457d Mon Sep 17 00:00:00 2001
From: mitao <2763622819@qq.com>
Date: 星期二, 20 五月 2025 23:48:08 +0800
Subject: [PATCH] 修改文件上传类型限制
---
springcloud_k8s_panzhihuazhihuishequ/grid_app/src/main/java/com/panzhihua/grid_app/api/CommonApi.java | 117 ++++++++++++++++++++++++++++++++++++++++------------------
1 files changed, 80 insertions(+), 37 deletions(-)
diff --git a/springcloud_k8s_panzhihuazhihuishequ/grid_app/src/main/java/com/panzhihua/grid_app/api/CommonApi.java b/springcloud_k8s_panzhihuazhihuishequ/grid_app/src/main/java/com/panzhihua/grid_app/api/CommonApi.java
index cdb8fff..2fbd308 100644
--- a/springcloud_k8s_panzhihuazhihuishequ/grid_app/src/main/java/com/panzhihua/grid_app/api/CommonApi.java
+++ b/springcloud_k8s_panzhihuazhihuishequ/grid_app/src/main/java/com/panzhihua/grid_app/api/CommonApi.java
@@ -1,24 +1,34 @@
package com.panzhihua.grid_app.api;
+import java.io.File;
+import java.io.IOException;
+import java.io.InputStream;
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.List;
+import java.util.UUID;
+import java.util.concurrent.atomic.AtomicBoolean;
+
+import javax.annotation.Resource;
+import javax.servlet.http.HttpServletRequest;
+
+import com.panzhihua.common.utlis.MimeTypeUtils;
+import com.panzhihua.grid_app.config.MinioUtil;
+import org.apache.commons.io.FilenameUtils;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.web.bind.annotation.*;
+import org.springframework.web.multipart.MultipartFile;
+
import com.panzhihua.common.constants.FtpConstants;
import com.panzhihua.common.model.vos.R;
import com.panzhihua.common.service.community.CommunityService;
import com.panzhihua.common.utlis.SFTPUtil;
+
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
import lombok.extern.slf4j.Slf4j;
-import org.springframework.beans.factory.annotation.Value;
-import org.springframework.data.redis.core.StringRedisTemplate;
-import org.springframework.web.bind.annotation.*;
-import org.springframework.web.multipart.MultipartFile;
-import javax.annotation.Resource;
-import javax.servlet.http.HttpServletRequest;
-import java.io.File;
-import java.io.IOException;
-import java.io.InputStream;
-import java.util.*;
-import java.util.concurrent.atomic.AtomicBoolean;
+import static com.panzhihua.common.utlis.FileTypeUploadUtils.assertAllowed;
/**
* @program: springcloud_k8s_panzhihuazhihuishequ
@@ -32,6 +42,14 @@
@Api(tags = {"公共接口"})
public class CommonApi {
+ /**
+ * 允许的图片文件后缀
+ */
+ private static List<String> fileExtensionAllow = Arrays.asList("gif", "jpg", "png", "jpeg");
+ /**
+ * 允许的视频文件后缀
+ */
+ private static List<String> videoExtensionAllow = Arrays.asList("mp4", "mov");
// FTP 登录用户名
@Value("${ftp.username}")
private String userName;
@@ -46,41 +64,33 @@
private int port;
@Value("${ftp.url}")
private String url;
-
@Resource
private CommunityService communityService;
-
- /**
- * 允许的图片文件后缀
- */
- private static List<String> fileExtensionAllow = Arrays.asList("gif", "jpg", "png", "jpeg");
- /**
- * 允许的视频文件后缀
- */
- private static List<String> videoExtensionAllow = Arrays.asList("mp4", "mov");
+ @Resource
+ private MinioUtil minioUtil;
@ApiOperation(value = "上传照片/视频 (jpg/jpeg/png/mp4/mov)")
@PostMapping(value = "uploadimage", consumes = "multipart/*", headers = "content-type=multipart/form-date")
public R uploadImage(@RequestParam MultipartFile file, HttpServletRequest request) throws IOException {
-// 微信图片内容校验
-// WxMaSecCheckService wxMaSecCheckService = wxMaConfiguration.getMaService().getSecCheckService();
+ // 微信图片内容校验
+ // WxMaSecCheckService wxMaSecCheckService = wxMaConfiguration.getMaService().getSecCheckService();
String property = System.getProperty("user.dir");
String fileExtension = ".jpg";
String originName = file.getOriginalFilename();
AtomicBoolean isVideo = new AtomicBoolean(false);
- videoExtensionAllow.forEach(ext ->{
+ videoExtensionAllow.forEach(ext -> {
String originNameLowerCase = originName.toLowerCase();
- if(originNameLowerCase.endsWith("." +ext)){
+ if (originNameLowerCase.endsWith("." + ext)) {
isVideo.set(true);
}
});
- if(isVideo.get()){
+ if (isVideo.get()) {
fileExtension = ".mp4";
}
- if(originName.toLowerCase().endsWith(".mp3")){
+ if (originName.toLowerCase().endsWith(".mp3")) {
fileExtension = ".mp3";
}
@@ -106,12 +116,26 @@
}
+ @ApiOperation(value = "新上传照片接口")
+ @PostMapping(value = "/uploadimages", consumes = "multipart/*", headers = "content-type=multipart/form-date")
+ public R uploadImages(@RequestParam MultipartFile file, HttpServletRequest request) {
+ try {
+ assertAllowed(file, MimeTypeUtils.DEFAULT_ALLOWED_EXTENSION);
+ String extension = FilenameUtils.getExtension(file.getOriginalFilename());
+ String name = UUID.randomUUID().toString().replaceAll("-", "") + "." + extension;
+ String imageUrl = minioUtil.upload(file, name);
+ return R.ok(imageUrl);
+ } catch (Exception e) {
+ log.error("上传照片失败【{}】", e.getMessage());
+ return R.fail();
+ }
+ }
@ApiOperation(value = "批量上传照片/视频 (jpg/jpeg/png/mp4/mov)")
@PostMapping(value = "uploads", consumes = "multipart/*", headers = "content-type=multipart/form-date")
- public R uploadImages(@RequestParam MultipartFile[] files, HttpServletRequest request) throws IOException {
-// 微信图片内容校验
-// WxMaSecCheckService wxMaSecCheckService = wxMaConfiguration.getMaService().getSecCheckService();
+ public R uploads(@RequestParam MultipartFile[] files, HttpServletRequest request) throws IOException {
+ // 微信图片内容校验
+ // WxMaSecCheckService wxMaSecCheckService = wxMaConfiguration.getMaService().getSecCheckService();
String property = System.getProperty("user.dir");
String fileExtension = ".jpg";
@@ -119,27 +143,28 @@
SFTPUtil sftp = new SFTPUtil(userName, password, host, port);
sftp.login();
- for (MultipartFile file:files) {
+ for (MultipartFile file : files) {
String originName = file.getOriginalFilename();
AtomicBoolean isVideo = new AtomicBoolean(false);
- videoExtensionAllow.forEach(ext ->{
+ videoExtensionAllow.forEach(ext -> {
String originNameLowerCase = originName.toLowerCase();
- if(originNameLowerCase.endsWith("." +ext)){
+ if (originNameLowerCase.endsWith("." + ext)) {
isVideo.set(true);
}
});
- if(isVideo.get()){
+ if (isVideo.get()) {
fileExtension = ".mp4";
}
- if(originName.toLowerCase().endsWith(".mp3")){
+ if (originName.toLowerCase().endsWith(".mp3")) {
fileExtension = ".mp3";
}
String name = UUID.randomUUID().toString().replaceAll("-", "") + fileExtension;
try {
InputStream is = file.getInputStream();
- String fileName = property + File.separator + UUID.randomUUID().toString().replace("-", "") + fileExtension;
+ String fileName =
+ property + File.separator + UUID.randomUUID().toString().replace("-", "") + fileExtension;
File file1 = new File(fileName);
file.transferTo(file1);
boolean delete = file1.delete();
@@ -155,9 +180,27 @@
return R.ok(urlList);
}
+ @ApiOperation(value = "新批量文件上传接口")
+ @PostMapping(value = "/uploadsimages", consumes = "multipart/*", headers = "content-type=multipart/form-date")
+ public R ossUploads(@RequestParam MultipartFile[] files, HttpServletRequest request) {
+ try {
+ List<String> urlList = new ArrayList<>();
+ for (MultipartFile file : files) {
+ String extension = FilenameUtils.getExtension(file.getOriginalFilename());
+ String name = UUID.randomUUID().toString().replaceAll("-", "") + "." + extension;
+ String imageUrl = minioUtil.upload(file, name);
+ urlList.add(imageUrl);
+ }
+ return R.ok(urlList);
+ } catch (Exception e) {
+ log.error("上传文件失败【{}】", e.getMessage());
+ return R.fail();
+ }
+ }
+
@GetMapping("/getConf/noToken")
@ApiOperation(value = "根据code查询系统配置")
- public R getConf(@RequestParam("code") String code){
+ public R getConf(@RequestParam("code") String code) {
return communityService.getConf(code);
}
}
--
Gitblit v1.7.1