discourse/app/controllers/user_avatars_controller.rb

137 lines
4.3 KiB
Ruby
Raw Normal View History

require_dependency 'letter_avatar'
class UserAvatarsController < ApplicationController
2014-05-27 08:29:27 -04:00
DOT = Base64.decode64("R0lGODlhAQABALMAAAAAAIAAAACAAICAAAAAgIAAgACAgMDAwICAgP8AAAD/AP//AAAA//8A/wD//wBiZCH5BAEAAA8ALAAAAAABAAEAAAQC8EUAOw==")
skip_before_filter :preload_json, :redirect_to_login_if_required, :check_xhr, :verify_authenticity_token, only: [:show, :show_letter, :show_proxy_letter]
def refresh_gravatar
user = User.find_by(username_lower: params[:username].downcase)
guardian.ensure_can_edit!(user)
if user
user.create_user_avatar(user_id: user.id) unless user.user_avatar
user.user_avatar.update_gravatar!
2015-09-11 06:56:34 -04:00
render json: {
gravatar_upload_id: user.user_avatar.gravatar_upload_id,
gravatar_avatar_template: User.avatar_template(user.username, user.user_avatar.gravatar_upload_id)
}
else
raise Discourse::NotFound
end
end
# mainly used in development for backwards compat
def show_proxy_letter
params.require(:letter)
params.require(:color)
params.require(:version)
params.require(:size)
no_cookies
identity = LetterAvatar::Identity.new
identity.letter = params[:letter].to_s[0].upcase
identity.color = params[:color].scan(/../).map(&:hex)
image = LetterAvatar.generate(params[:letter].to_s, params[:size].to_i, identity: identity)
response.headers["Last-Modified"] = File.ctime(image).httpdate
response.headers["Content-Length"] = File.size(image).to_s
expires_in 1.year, public: true
send_file image, disposition: nil
end
def show_letter
params.require(:username)
params.require(:version)
params.require(:size)
no_cookies
return render_dot if params[:version] != LetterAvatar.version
image = LetterAvatar.generate(params[:username].to_s, params[:size].to_i)
response.headers["Last-Modified"] = File.ctime(image).httpdate
response.headers["Content-Length"] = File.size(image).to_s
expires_in 1.year, public: true
send_file image, disposition: nil
end
def show
no_cookies
# we need multisite support to keep a single origin pull for CDNs
RailsMultisite::ConnectionManagement.with_hostname(params[:hostname]) do
2015-05-29 12:51:17 -04:00
show_in_site(params[:hostname])
end
end
protected
def show_in_site(hostname)
username = params[:username].to_s
2014-05-27 08:29:27 -04:00
return render_dot unless user = User.find_by(username_lower: username.downcase)
2015-05-29 13:19:41 -04:00
upload_id, version = params[:version].split("_")
version = (version || OptimizedImage::VERSION).to_i
return render_dot if version != OptimizedImage::VERSION
upload_id = upload_id.to_i
return render_dot unless upload_id > 0 && user_avatar = user.user_avatar
size = params[:size].to_i
return render_dot if size < 8 || size > 500
if !Discourse.avatar_sizes.include?(size) && Discourse.store.external?
closest = Discourse.avatar_sizes.to_a.min { |a,b| (size-a).abs <=> (size-b).abs }
2015-05-29 13:19:41 -04:00
avatar_url = UserAvatar.local_avatar_url(hostname, user.username_lower, upload_id, closest)
2015-05-29 12:51:17 -04:00
return redirect_to cdn_path(avatar_url)
end
2015-05-29 13:19:41 -04:00
upload = Upload.find_by(id: upload_id) if user_avatar.contains_upload?(upload_id)
upload ||= user.uploaded_avatar if user.uploaded_avatar_id == upload_id
if user.uploaded_avatar && !upload
2015-05-29 12:51:17 -04:00
avatar_url = UserAvatar.local_avatar_url(hostname, user.username_lower, user.uploaded_avatar_id, size)
return redirect_to cdn_path(avatar_url)
2015-06-01 11:49:58 -04:00
elsif upload && optimized = get_optimized_image(upload, size)
if optimized.local?
optimized_path = Discourse.store.path_for(optimized)
image = optimized_path if File.exists?(optimized_path)
else
expires_in 1.day, public: true
return redirect_to Discourse.store.cdn_url(optimized.url)
end
end
if image
2014-07-08 03:16:07 -04:00
response.headers["Last-Modified"] = File.ctime(image).httpdate
response.headers["Content-Length"] = File.size(image).to_s
expires_in 1.year, public: true
send_file image, disposition: nil
else
2014-05-27 08:29:27 -04:00
render_dot
end
end
2014-05-27 08:29:27 -04:00
# this protects us from a DoS
def render_dot
expires_in 10.minutes, public: true
render text: DOT, content_type: "image/png"
end
def get_optimized_image(upload, size)
OptimizedImage.create_for(
upload,
size,
size,
filename: upload.original_filename,
allow_animation: SiteSetting.allow_animated_avatars,
)
end
end