85 lines
2.5 KiB
JavaScript
85 lines
2.5 KiB
JavaScript
// @flow
|
|
import crypto from 'crypto';
|
|
import moment from 'moment';
|
|
import AWS from 'aws-sdk';
|
|
import invariant from 'invariant';
|
|
import fetch from 'isomorphic-fetch';
|
|
import bugsnag from 'bugsnag';
|
|
|
|
const AWS_SECRET_ACCESS_KEY = process.env.AWS_SECRET_ACCESS_KEY;
|
|
const AWS_S3_UPLOAD_BUCKET_NAME = process.env.AWS_S3_UPLOAD_BUCKET_NAME;
|
|
|
|
export const makePolicy = () => {
|
|
const policy = {
|
|
conditions: [
|
|
{ bucket: process.env.AWS_S3_UPLOAD_BUCKET_NAME },
|
|
['starts-with', '$key', ''],
|
|
{ acl: 'public-read' },
|
|
['content-length-range', 0, process.env.AWS_S3_UPLOAD_MAX_SIZE],
|
|
['starts-with', '$Content-Type', 'image'],
|
|
['starts-with', '$Cache-Control', ''],
|
|
],
|
|
expiration: moment()
|
|
.add(24 * 60, 'minutes')
|
|
.format('YYYY-MM-DDTHH:mm:ss\\Z'),
|
|
};
|
|
|
|
return new Buffer(JSON.stringify(policy)).toString('base64');
|
|
};
|
|
|
|
export const signPolicy = (policy: any) => {
|
|
invariant(AWS_SECRET_ACCESS_KEY, 'AWS_SECRET_ACCESS_KEY not set');
|
|
const signature = crypto
|
|
.createHmac('sha1', AWS_SECRET_ACCESS_KEY)
|
|
.update(policy)
|
|
.digest('base64');
|
|
|
|
return signature;
|
|
};
|
|
|
|
export const publicS3Endpoint = () => {
|
|
// lose trailing slash if there is one and convert fake-s3 url to localhost
|
|
// for access outside of docker containers in local development
|
|
const host = process.env.AWS_S3_UPLOAD_BUCKET_URL.replace(
|
|
's3:',
|
|
'localhost:'
|
|
).replace(/\/$/, '');
|
|
|
|
return `${host}/${process.env.AWS_S3_UPLOAD_BUCKET_NAME}`;
|
|
};
|
|
|
|
export const uploadToS3FromUrl = async (url: string, key: string) => {
|
|
const s3 = new AWS.S3({
|
|
s3ForcePathStyle: true,
|
|
accessKeyId: process.env.AWS_ACCESS_KEY_ID,
|
|
secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
|
|
endpoint: new AWS.Endpoint(process.env.AWS_S3_UPLOAD_BUCKET_URL),
|
|
});
|
|
invariant(AWS_S3_UPLOAD_BUCKET_NAME, 'AWS_S3_UPLOAD_BUCKET_NAME not set');
|
|
|
|
try {
|
|
// $FlowIssue https://github.com/facebook/flow/issues/2171
|
|
const res = await fetch(url);
|
|
const buffer = await res.buffer();
|
|
await s3
|
|
.putObject({
|
|
ACL: 'public-read',
|
|
Bucket: process.env.AWS_S3_UPLOAD_BUCKET_NAME,
|
|
Key: key,
|
|
ContentType: res.headers['content-type'],
|
|
ContentLength: res.headers['content-length'],
|
|
Body: buffer,
|
|
})
|
|
.promise();
|
|
|
|
const endpoint = publicS3Endpoint();
|
|
return `${endpoint}/${key}`;
|
|
} catch (err) {
|
|
if (process.env.NODE_ENV === 'production') {
|
|
bugsnag.notify(err);
|
|
} else {
|
|
throw err;
|
|
}
|
|
}
|
|
};
|