PKPTemporaryFilesHandler.inc.php

<?php
import('lib.pkp.classes.handler.APIHandler');
 
class PKPTemporaryFilesHandler extends APIHandler {
   public function __construct() {
      $this->_handlerPath = 'temporaryFiles';
      $roles = array(ROLE_ID_SITE_ADMIN, ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_REVIEWER, ROLE_ID_AUTHOR, ROLE_ID_ASSISTANT);
      $this->_endpoints = array(
         'OPTIONS' => array(
            array(
               'pattern' => $this->getEndpointPattern(),
               'handler' => array($this, 'getOptions'),
               'roles' => $roles,
            ),
         ),
         'POST' => array(
            array(
               'pattern' => $this->getEndpointPattern(),
               'handler' => array($this, 'uploadFile'),
               'roles' => $roles,
            ),
         ),
      );
 
      parent::__construct();
   }
 
   public function authorize($request, &$args, $roleAssignments) {
      import('lib.pkp.classes.security.authorization.PolicySet');
      $rolePolicy = new PolicySet(COMBINING_PERMIT_OVERRIDES);
 
      import('lib.pkp.classes.security.authorization.RoleBasedHandlerOperationPolicy');
      foreach($roleAssignments as $role => $operations) {
         $rolePolicy->addPolicy(new RoleBasedHandlerOperationPolicy($request, $role, $operations));
      }
      $this->addPolicy($rolePolicy);
 
      return parent::authorize($request, $args, $roleAssignments);
   }
 
   private function getResponse($response) {
      return $response->withHeader('Access-Control-Allow-Headers', 'Content-Type, X-Requested-With, X-PINGOTHER, X-File-Name, Cache-Control');
   }
 
   public function uploadFile($slimRequest, $response, $args) {
      $request = $this->getRequest();
 
      if (empty($_FILES)) {
         return $response->withStatus(400)->withJsonError('api.temporaryFiles.400.noUpload');
      }
 
      import('lib.pkp.classes.file.TemporaryFileManager');
      $temporaryFileManager = new TemporaryFileManager();
      $fileName = $temporaryFileManager->getFirstUploadedPostName();
      $uploadedFile = $temporaryFileManager->handleUpload($fileName, $request->getUser()->getId());
 
      if ($uploadedFile === false) {
         if ($temporaryFileManager->uploadError($fileName)) {
            switch ($temporaryFileManager->getUploadErrorCode($fileName)) {
               case UPLOAD_ERR_INI_SIZE:
               case UPLOAD_ERR_FORM_SIZE:
               return $response->withStatus(400)->withJsonError('api.temporaryFiles.400.fileSize', ['maxSize' => Application::getReadableMaxFileSize()]);
               case UPLOAD_ERR_PARTIAL:
               return $response->withStatus(400)->withJsonError('api.temporaryFiles.409.uploadFailed');
               case UPLOAD_ERR_NO_FILE:
               return $response->withStatus(400)->withJsonError('api.temporaryFiles.400.noUpload');
               case UPLOAD_ERR_NO_TMP_DIR:
               case UPLOAD_ERR_CANT_WRITE:
               case UPLOAD_ERR_EXTENSION:
               return $response->withStatus(400)->withJsonError('api.temporaryFiles.400.config');
            }
         }
         return $response->withStatus(400)->withJsonError('api.temporaryFiles.409.uploadFailed');
      }
 
      return $this->getResponse($response->withJson(['id' => $uploadedFile->getId()]));
   }
 
   public function getOptions($slimRequest, $response, $args) {
      return $this->getResponse($response);
   }
}