Something went wrong. Try again.
A lexicon-driven AppView for ATProto.
Something went wrong. Try again.
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697use axum::body::Bytes;use axum::extract::State;use axum::http::HeaderMap;use axum::response::Response;
use crate::AppState;use crate::auth::XrpcClaims;use crate::error::AppError;use crate::rate_limit::CheckResult;
use super::pds::pds_post_blob;use super::session::get_oauth_session;
pub async fn upload_blob( State(state): State<AppState>, xrpc_claims: XrpcClaims, headers: HeaderMap, body: Bytes,) -> Result<Response, AppError> { let claims = xrpc_claims .identity .ok_or_else(|| AppError::Auth("uploadBlob requires DPoP authentication".into()))?; let check = if let Some(client_key) = claims.client_key() { let cost = state .rate_limiter .default_cost_for_type(client_key, "procedure"); Some(state.rate_limiter.check(client_key, cost)) } else { None };
if let Some(CheckResult::Limited { retry_after, limit, reset, }) = check { return Err(AppError::RateLimited { retry_after, limit, reset, }); }
let content_type = headers .get("content-type") .and_then(|v| v.to_str().ok()) .unwrap_or("application/octet-stream");
let mut response = if let Some(client_key) = claims.client_key() { let encryption_key = state .config .token_encryption_key .as_ref() .ok_or_else(|| AppError::Internal("TOKEN_ENCRYPTION_KEY not configured".into()))?;
let api_client_id = crate::repo::get_dpop_client_id(&state, client_key).await?; let dpop_key_id = claims .dpop_key_id() .ok_or_else(|| AppError::Internal("DPoP key ID not available in claims".into()))?;
let resp = crate::oauth::pds_write::dpop_pds_post_blob( &state.http, &state.db, state.db_backend, encryption_key, &state.oauth, &state.config.plc_url, &api_client_id, claims.did(), dpop_key_id, content_type, body, ) .await?;
crate::repo::forward_pds_response(resp).await? } else { let session = get_oauth_session(&state, claims.did()).await?; pds_post_blob(&state, &session, content_type, body).await? };
if let Some(CheckResult::Allowed { remaining, limit, reset, }) = check { let h = response.headers_mut(); h.insert("RateLimit-Limit", limit.into()); h.insert("RateLimit-Remaining", remaining.into()); h.insert("RateLimit-Reset", reset.into()); }
Ok(response)}