feat：新增dify1.11.1版本

dify_1.11.1/api/controllers/files/upload.py

@@ -0,0 +1,133 @@
+from mimetypes import guess_extension
+
+from flask import request
+from flask_restx import Resource
+from flask_restx.api import HTTPStatus
+from pydantic import BaseModel, Field
+from werkzeug.datastructures import FileStorage
+from werkzeug.exceptions import Forbidden
+
+import services
+from core.file.helpers import verify_plugin_file_signature
+from core.tools.tool_file_manager import ToolFileManager
+from fields.file_fields import build_file_model
+
+from ..common.errors import (
+    FileTooLargeError,
+    UnsupportedFileTypeError,
+)
+from ..console.wraps import setup_required
+from ..files import files_ns
+from ..inner_api.plugin.wraps import get_user
+
+DEFAULT_REF_TEMPLATE_SWAGGER_2_0 = "#/definitions/{model}"
+
+
+class PluginUploadQuery(BaseModel):
+    timestamp: str = Field(..., description="Unix timestamp for signature verification")
+    nonce: str = Field(..., description="Random nonce for signature verification")
+    sign: str = Field(..., description="HMAC signature")
+    tenant_id: str = Field(..., description="Tenant identifier")
+    user_id: str | None = Field(default=None, description="User identifier")
+
+
+files_ns.schema_model(
+    PluginUploadQuery.__name__, PluginUploadQuery.model_json_schema(ref_template=DEFAULT_REF_TEMPLATE_SWAGGER_2_0)
+)
+
+
+@files_ns.route("/upload/for-plugin")
+class PluginUploadFileApi(Resource):
+    @setup_required
+    @files_ns.expect(files_ns.models[PluginUploadQuery.__name__])
+    @files_ns.doc("upload_plugin_file")
+    @files_ns.doc(description="Upload a file for plugin usage with signature verification")
+    @files_ns.doc(
+        responses={
+            201: "File uploaded successfully",
+            400: "Invalid request parameters",
+            403: "Forbidden - Invalid signature or missing parameters",
+            413: "File too large",
+            415: "Unsupported file type",
+        }
+    )
+    @files_ns.marshal_with(build_file_model(files_ns), code=HTTPStatus.CREATED)
+    def post(self):
+        """Upload a file for plugin usage.
+
+        Accepts a file upload with signature verification for security.
+        The file must be accompanied by valid timestamp, nonce, and signature parameters.
+
+        Returns:
+            dict: File metadata including ID, URLs, and properties
+            int: HTTP status code (201 for success)
+
+        Raises:
+            Forbidden: Invalid signature or missing required parameters
+            FileTooLargeError: File exceeds size limit
+            UnsupportedFileTypeError: File type not supported
+        """
+        args = PluginUploadQuery.model_validate(request.args.to_dict(flat=True))  # type: ignore
+
+        file: FileStorage | None = request.files.get("file")
+        if file is None:
+            raise Forbidden("File is required.")
+
+        timestamp = args.timestamp
+        nonce = args.nonce
+        sign = args.sign
+        tenant_id = args.tenant_id
+        user_id = args.user_id
+        user = get_user(tenant_id, user_id)
+
+        filename: str | None = file.filename
+        mimetype: str | None = file.mimetype
+
+        if not filename or not mimetype:
+            raise Forbidden("Invalid request.")
+
+        if not verify_plugin_file_signature(
+            filename=filename,
+            mimetype=mimetype,
+            tenant_id=tenant_id,
+            user_id=user.id,
+            timestamp=timestamp,
+            nonce=nonce,
+            sign=sign,
+        ):
+            raise Forbidden("Invalid request.")
+
+        try:
+            tool_file = ToolFileManager().create_file_by_raw(
+                user_id=user.id,
+                tenant_id=tenant_id,
+                file_binary=file.read(),
+                mimetype=mimetype,
+                filename=filename,
+                conversation_id=None,
+            )
+
+            extension = guess_extension(tool_file.mimetype) or ".bin"
+            preview_url = ToolFileManager.sign_file(tool_file_id=tool_file.id, extension=extension)
+
+            # Create a dictionary with all the necessary attributes
+            result = {
+                "id": tool_file.id,
+                "user_id": tool_file.user_id,
+                "tenant_id": tool_file.tenant_id,
+                "conversation_id": tool_file.conversation_id,
+                "file_key": tool_file.file_key,
+                "mimetype": tool_file.mimetype,
+                "original_url": tool_file.original_url,
+                "name": tool_file.name,
+                "size": tool_file.size,
+                "mime_type": mimetype,
+                "extension": extension,
+                "preview_url": preview_url,
+            }
+
+            return result, 201
+        except services.errors.file.FileTooLargeError as file_too_large_error:
+            raise FileTooLargeError(file_too_large_error.description)
+        except services.errors.file.UnsupportedFileTypeError:
+            raise UnsupportedFileTypeError()