39a7269494
- Add Content-Length pre-check to story-pack and story-unpack routes to reject oversized payloads before buffering the body - Suppress internal error details in story-unpack catch (was leaking e.message to the client) - Strengthen sceneIndex validation: require non-negative integer - Guard against undefined storyState when replaying shared stories - Fix prefetch regression: remove currentBeat?.id from useEffect deps that was re-triggering all change-scene prefetches on every beat - Fix double detach: use else-if so the second replay detach guard doesn't fire redundantly after the first already detached - Align client file-size limit by format (.json 12MB, .infiplot 13MB) - Move "载入剧情" import button next to "开始" with hover tooltip Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
53 lines
1.4 KiB
TypeScript
53 lines
1.4 KiB
TypeScript
import { packDoc } from "@/lib/galleryCrypto";
|
|
|
|
export const runtime = "nodejs";
|
|
|
|
const MAX_DOC_BYTES = 12_000_000;
|
|
|
|
export async function POST(req: Request): Promise<Response> {
|
|
const secret = process.env.GALLERY_SECRET;
|
|
if (!secret) {
|
|
return Response.json(
|
|
{ error: "剧情分享未启用 (GALLERY_SECRET 未配置)" },
|
|
{ status: 503 },
|
|
);
|
|
}
|
|
|
|
const contentLength = req.headers.get("content-length");
|
|
if (contentLength && Number(contentLength) > MAX_DOC_BYTES + 1024) {
|
|
return Response.json(
|
|
{ error: "剧情数据太大,无法打包分享" },
|
|
{ status: 413 },
|
|
);
|
|
}
|
|
|
|
let docStr: string;
|
|
try {
|
|
const body = (await req.json()) as { docStr?: unknown };
|
|
if (typeof body.docStr !== "string") {
|
|
return Response.json({ error: "Missing docStr" }, { status: 400 });
|
|
}
|
|
docStr = body.docStr;
|
|
} catch {
|
|
return Response.json({ error: "Bad JSON" }, { status: 400 });
|
|
}
|
|
|
|
if (new TextEncoder().encode(docStr).byteLength > MAX_DOC_BYTES) {
|
|
return Response.json(
|
|
{ error: "剧情数据太大,无法打包分享" },
|
|
{ status: 413 },
|
|
);
|
|
}
|
|
|
|
const bytes = await packDoc(docStr, secret);
|
|
const ab = new ArrayBuffer(bytes.byteLength);
|
|
new Uint8Array(ab).set(bytes);
|
|
return new Response(ab, {
|
|
status: 200,
|
|
headers: {
|
|
"Content-Type": "application/octet-stream",
|
|
"Cache-Control": "no-store",
|
|
},
|
|
});
|
|
}
|