live_beats/lib/live_beats_web/controllers/file_controller.ex
Chris McCord e496ff0a4e Docs
2021-11-15 13:06:04 -05:00

24 lines
807 B
Elixir

defmodule LiveBeatsWeb.FileController do
@moduledoc """
Serves files based on short-term token grants.
"""
use LiveBeatsWeb, :controller
alias LiveBeats.MediaLibrary
def show(conn, %{"id" => filename_uuid, "token" => token}) do
case Phoenix.Token.verify(conn, "file", token, max_age: :timer.minutes(10)) do
{:ok, ^filename_uuid} -> do_send_file(conn, MediaLibrary.local_filepath(filename_uuid))
{:ok, _} -> send_resp(conn, :unauthorized, "")
{:error, _} -> send_resp(conn, :unauthorized, "")
end
end
defp do_send_file(conn, path) do
# accept-ranges headers required for chrome to seek via currentTime
conn
|> put_resp_header("content-type", MIME.from_path(path))
|> put_resp_header("accept-ranges", "bytes")
|> send_file(200, path)
end
end