fix and update

2026-07-01 23:27:48 +03:00
parent 2b88e028c6
commit bcdfbc3861
36 changed files with 1504 additions and 320 deletions
--- a/apps/sso-core/src/infra/document-media.util.ts
+++ b/apps/sso-core/src/infra/document-media.util.ts
@@ -0,0 +1,141 @@
+const BLOCKED_DOCUMENT_TYPES = new Set([
+  'application/javascript',
+  'application/x-javascript',
+  'text/javascript',
+  'text/html',
+  'application/xhtml+xml',
+  'application/x-httpd-php',
+  'application/x-sh'
+]);
+
+const EXTENSION_TO_MIME: Record<string, string> = {
+  jpg: 'image/jpeg',
+  jpeg: 'image/jpeg',
+  png: 'image/png',
+  webp: 'image/webp',
+  gif: 'image/gif',
+  pdf: 'application/pdf',
+  doc: 'application/msword',
+  docx: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+  xls: 'application/vnd.ms-excel',
+  xlsx: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+  ppt: 'application/vnd.ms-powerpoint',
+  pptx: 'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+  txt: 'text/plain',
+  rtf: 'application/rtf',
+  odt: 'application/vnd.oasis.opendocument.text'
+};
+
+const ALLOWED_DOCUMENT_MIME = new Set([
+  'image/jpeg',
+  'image/png',
+  'image/webp',
+  'image/gif',
+  'application/pdf',
+  'application/msword',
+  'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+  'application/vnd.ms-excel',
+  'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+  'application/vnd.ms-powerpoint',
+  'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+  'text/plain',
+  'application/rtf',
+  'application/vnd.oasis.opendocument.text'
+]);
+
+const MIME_ALIASES: Record<string, string> = {
+  'image/jpg': 'image/jpeg',
+  'image/pjpeg': 'image/jpeg',
+  'application/x-pdf': 'application/pdf'
+};
+
+function extractFileExtension(fileName?: string | null) {
+  const trimmed = (fileName ?? '').trim().toLowerCase();
+  const dotIndex = trimmed.lastIndexOf('.');
+  if (dotIndex <= 0) return '';
+  return trimmed.slice(dotIndex + 1);
+}
+
+export function normalizeDocumentContentType(contentType?: string | null, fileName?: string | null) {
+  const raw = (contentType ?? '').trim().toLowerCase();
+  const base = raw.split(';')[0]?.trim() ?? '';
+  const aliased = MIME_ALIASES[base] ?? base;
+
+  if (aliased && aliased !== 'application/octet-stream' && ALLOWED_DOCUMENT_MIME.has(aliased)) {
+    return aliased;
+  }
+
+  const extension = extractFileExtension(fileName);
+  if (extension && EXTENSION_TO_MIME[extension]) {
+    return EXTENSION_TO_MIME[extension];
+  }
+
+  return aliased || 'application/octet-stream';
+}
+
+export function assertDocumentAttachmentContentType(contentType: string, fileName?: string) {
+  const normalized = normalizeDocumentContentType(contentType, fileName);
+  if (BLOCKED_DOCUMENT_TYPES.has(normalized)) {
+    throw new Error('Тип файла не поддерживается');
+  }
+  if (!ALLOWED_DOCUMENT_MIME.has(normalized)) {
+    throw new Error('Допустимы изображения, PDF, Word, Excel, PowerPoint, TXT и ODT');
+  }
+  return normalized;
+}
+
+export function extensionForDocumentContentType(contentType: string, fileName?: string) {
+  const normalized = normalizeDocumentContentType(contentType, fileName);
+  switch (normalized) {
+    case 'image/jpeg':
+      return 'jpg';
+    case 'image/png':
+      return 'png';
+    case 'image/webp':
+      return 'webp';
+    case 'image/gif':
+      return 'gif';
+    case 'application/pdf':
+      return 'pdf';
+    case 'application/msword':
+      return 'doc';
+    case 'application/vnd.openxmlformats-officedocument.wordprocessingml.document':
+      return 'docx';
+    case 'application/vnd.ms-excel':
+      return 'xls';
+    case 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet':
+      return 'xlsx';
+    case 'application/vnd.ms-powerpoint':
+      return 'ppt';
+    case 'application/vnd.openxmlformats-officedocument.presentationml.presentation':
+      return 'pptx';
+    case 'text/plain':
+      return 'txt';
+    case 'application/rtf':
+      return 'rtf';
+    case 'application/vnd.oasis.opendocument.text':
+      return 'odt';
+    default: {
+      const extension = extractFileExtension(fileName);
+      return extension || 'bin';
+    }
+  }
+}
+
+export function contentTypeForDocumentKey(storageKey: string) {
+  const lower = storageKey.toLowerCase();
+  if (lower.endsWith('.png')) return 'image/png';
+  if (lower.endsWith('.webp')) return 'image/webp';
+  if (lower.endsWith('.gif')) return 'image/gif';
+  if (lower.endsWith('.pdf')) return 'application/pdf';
+  if (lower.endsWith('.doc')) return 'application/msword';
+  if (lower.endsWith('.docx')) return 'application/vnd.openxmlformats-officedocument.wordprocessingml.document';
+  if (lower.endsWith('.xls')) return 'application/vnd.ms-excel';
+  if (lower.endsWith('.xlsx')) return 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet';
+  if (lower.endsWith('.ppt')) return 'application/vnd.ms-powerpoint';
+  if (lower.endsWith('.pptx')) return 'application/vnd.openxmlformats-officedocument.presentationml.presentation';
+  if (lower.endsWith('.txt')) return 'text/plain';
+  if (lower.endsWith('.rtf')) return 'application/rtf';
+  if (lower.endsWith('.odt')) return 'application/vnd.oasis.opendocument.text';
+  return 'image/jpeg';
+}