gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2024-11-26 15:32:13 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

use jwt for securing preview image

Browse Source
This commit is contained in:
Uwe Steinmann 2021-05-07 14:37:36 +02:00
parent 06025d03db
commit 1cb6816a6f
2 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
op/op.TimelineFeedPreview.php
View File

@ -38,13 +38,11 @@ require_once("SeedDMS/Preview.php");
if(empty($_GET['hash']))
exit;
$token = new SeedDMS_JwtToken($settings->_extensions['encryptionKey']);
$token = new SeedDMS_JwtToken($settings->_encryptionKey);
if(!($tokenstr = $token->jwtDecode($_GET['hash'])))
exit;
$tokendata = json_decode($tokenstr, true);
print_r($tokendata);
exit;
if (!isset($tokendata['d']) || !is_numeric($tokendata['d'])) {
exit;

6
views/bootstrap/class.TimelineFeed.php
View File

@ -39,6 +39,7 @@ class SeedDMS_View_TimelineFeed extends SeedDMS_Theme_Style {
function show() { /* {{{ */
$dms = $this->params['dms'];
$user = $this->params['user'];
$settings = $this->params['settings'];
$httproot = $this->params['httproot'];
$skip = $this->params['skip'];
$fromdate = $this->params['fromdate'];
@ -132,7 +133,10 @@ class SeedDMS_View_TimelineFeed extends SeedDMS_Theme_Style {
$version = $doc->getContentByVersion($item['version']);
$previewer->createPreview($version);
if($previewer->hasPreview($version)) {
$newItem->addElement('enclosure', null, array('url' => $baseurl.'op/op.TimelineFeedPreview.php?documentid='.$item['document']->getId().'&version='.$version->getVersion().'&width='.$previewwidthdetail, 'length'=>$previewer->getFileSize($version), 'type'=>'image/png'));
$token = new SeedDMS_JwtToken($settings->_encryptionKey);
$data = array('d'=>$doc->getId(), 'v'=>$item['version'], 'u'=>$user->getId(), 'w'=>$previewwidthdetail,);
$hash = $token->jwtEncode($data);
$newItem->addElement('enclosure', null, array('url' => $baseurl.'op/op.TimelineFeedPreview.php?hash='.$hash, 'length'=>$previewer->getFileSize($version), 'type'=>'image/png'));
}
}
$feed->addItem($newItem);