57 lines
1.9 KiB
PHP
57 lines
1.9 KiB
PHP
<?php
|
|
|
|
namespace Paymenter\Extensions\Others\SocialBase\Http\Controllers;
|
|
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Facades\Storage;
|
|
use Paymenter\Extensions\Others\SocialBase\Models\Message;
|
|
use Paymenter\Extensions\Others\SocialBase\Models\Conversation;
|
|
|
|
class AttachmentController
|
|
{
|
|
public function download(Request $request, $messageId, $attachmentIndex)
|
|
{
|
|
// Check if user is authenticated
|
|
if (!Auth::check()) {
|
|
abort(403, 'You must be logged in to view attachments.');
|
|
}
|
|
|
|
// Find the message
|
|
$message = Message::findOrFail($messageId);
|
|
|
|
// Check if user is participant in the conversation
|
|
$conversation = Conversation::findOrFail($message->conversation_id);
|
|
if (!$conversation->hasParticipant(Auth::id())) {
|
|
abort(403, 'You do not have access to this attachment.');
|
|
}
|
|
|
|
// Get the attachment
|
|
$attachments = $message->attachments;
|
|
if (!$attachments || !isset($attachments[$attachmentIndex])) {
|
|
abort(404, 'Attachment not found.');
|
|
}
|
|
|
|
$attachment = $attachments[$attachmentIndex];
|
|
|
|
// Check if file exists
|
|
if (!Storage::disk('local')->exists($attachment['path'])) {
|
|
abort(404, 'Attachment file not found.');
|
|
}
|
|
|
|
// Get file contents
|
|
$file = Storage::disk('local')->get($attachment['path']);
|
|
$mimeType = $attachment['type'] ?? 'application/octet-stream';
|
|
$fileName = $attachment['name'] ?? 'attachment';
|
|
|
|
// Return file response with appropriate headers
|
|
return response($file, 200)
|
|
->header('Content-Type', $mimeType)
|
|
->header('Content-Disposition', 'inline; filename="' . $fileName . '"')
|
|
->header('Cache-Control', 'no-cache, no-store, must-revalidate')
|
|
->header('Pragma', 'no-cache')
|
|
->header('Expires', '0');
|
|
}
|
|
}
|
|
|