Adding download controller

Author: RobFaustLZ

package.json

@@ -1,7 +1,7 @@
 {
   "name": "labelzoom-cf-api-proxy",
   "description": "A Cloudflare Worker that serves as a reverse proxy for LabelZoom's public REST API",
-  "version": "1.1.3",
+  "version": "1.2.0",
   "private": true,
   "dependencies": {
     "hono": "4.7.7",

src/worker/constants.ts

@@ -0,0 +1,21 @@
+export const GET_LATEST_VERSION_SQL = `
+SELECT
+	pvv.*
+FROM
+	products_variants_versions pvv
+JOIN products_variants pv
+ON
+	pv.id = pvv.variant_id
+JOIN products p
+ON
+	p.id = pv.product_id
+WHERE
+	p.name = 'LabelZoom Studio'
+ORDER BY
+	pvv.major DESC,
+	pvv.minor DESC,
+	pvv.revision DESC
+LIMIT 1;
+`;
+
+export const VERIFY_LICENSE_SQL = "SELECT 1 FROM licenses WHERE id = ? AND license_secret = ?;";

src/worker/index.ts

@@ -11,6 +11,7 @@ import { every } from "hono/combine";
 import { hyperdriveMysql } from "./middleware/hyperdrive-mysql";
 import { bearerAuth } from "hono/bearer-auth";
 import { logger } from "hono/logger";
+import { GET_LATEST_VERSION_SQL, VERIFY_LICENSE_SQL } from "./constants";
 
 async function verifyTokenAndLicense(token: string, c: Context) {
     const db = c.get('db');
@@ -23,7 +24,7 @@ async function verifyTokenAndLicense(token: string, c: Context) {
         // Verify license
         const licenseId = payload.lic;
         const licenseKey = payload.secret;
-        const [results] = await db.query("SELECT * FROM licenses WHERE id = ? AND license_secret = ?;", [licenseId, licenseKey]);
+        const [results] = await db.query(VERIFY_LICENSE_SQL, [licenseId, licenseKey]);
         return (results as mysql.RowDataPacket[]).length === 1;
     } catch (err) {
         console.warn('error verifying token', err);
@@ -88,6 +89,25 @@ app.use("/api/v2/convert/:sourceFormat/to/:targetFormat", (c, next) => {
 });
 //#endregion
 
+//#region Download redirects
+app.use("/download/*", (c, next) => {
+    return hyperdriveMysql({
+        config: c.env.DB,
+    })(c, next);
+});
+app.get("/download/:version/:packageName", async (c) => {
+    let { version, packageName } = c.req.param();
+    if (version === 'latest') {
+        const db = c.get('db');
+        if (!db) throw new Error('download controller must be used with (and sequenced after) the hyperdrive middleware');
+        const [results] = await db.query(GET_LATEST_VERSION_SQL);
+        const rows = results as mysql.RowDataPacket[];
+        version = `${rows[0].major}.${rows[0].minor}.${rows[0].revision}`;
+    }
+    return c.redirect(`${c.env.S3_BUCKET}/${version}/${packageName}`);
+});
+//#endregion
+
 //#region All other requests
 app.use(forceRelativeRedirects());
 app.use(async (c, next) => {

src/worker/middleware/hyperdrive-mysql/hyperdrive-mysql.ts

@@ -10,7 +10,7 @@ import { MiddlewareHandler } from "hono";
  * @todo TODO: Get rid of this once Cloudflare adds this type to the output of `wrangler types`
  */
 export type Connection = mysql.Connection & {
-    query(sql: string, values: any): Promise<[mysql.OkPacket | mysql.ResultSetHeader | mysql.RowDataPacket[] | mysql.RowDataPacket[][] | mysql.OkPacket[], mysql.FieldPacket[]]>;
+    query(sql: string, values?: any): Promise<[mysql.OkPacket | mysql.ResultSetHeader | mysql.RowDataPacket[] | mysql.RowDataPacket[][] | mysql.OkPacket[], mysql.FieldPacket[]]>;
 };
 
 function getConnection(hyperdrive: Hyperdrive): Promise<Connection> {

worker-configuration.d.ts

@@ -13,6 +13,7 @@ declare namespace Cloudflare {
         LZ_PUBLIC_KEY: string;
         LZ_R2_BUCKET: R2Bucket;
         DB: Hyperdrive;
+        S3_BUCKET: string;
     }
 }
 interface Env extends Cloudflare.Env {}

wrangler.jsonc

@@ -62,6 +62,7 @@
         "LZ_ERROR_SAMPLE_RATE": 1,
         "LZ_PROD_API_BASE_URL": "http://localhost:5000",
         "ENVIRONMENT": "dev",
+        "S3_BUCKET": "https://labelzoom-packages.s3.us-east-2.amazonaws.com",
     },
     "env": {
         "beta": {
@@ -76,6 +77,7 @@
                 "LZ_ERROR_SAMPLE_RATE": 1,
                 "LZ_PROD_API_BASE_URL": "https://api-backend.labelzoom.net",
                 "ENVIRONMENT": "staging",
+                "S3_BUCKET": "https://labelzoom-packages.s3.us-east-2.amazonaws.com",
             },
             "limits": {
                 "cpu_ms": 100
@@ -117,6 +119,7 @@
                 "LZ_ERROR_SAMPLE_RATE": 0,
                 "LZ_PROD_API_BASE_URL": "https://api-backend.labelzoom.net",
                 "ENVIRONMENT": "production",
+                "S3_BUCKET": "https://labelzoom-packages.s3.us-east-2.amazonaws.com",
             },
             "limits": {
                 "cpu_ms": 100
@@ -159,6 +162,7 @@
                 "LZ_ERROR_SAMPLE_RATE": 0,
                 "LZ_PROD_API_BASE_URL": "https://prod-api-eus1-backend.labelzoom.net",
                 "ENVIRONMENT": "production",
+                "S3_BUCKET": "https://labelzoom-packages.s3.us-east-2.amazonaws.com",
             },
             "limits": {
                 "cpu_ms": 100
@@ -201,6 +205,7 @@
                 "LZ_ERROR_SAMPLE_RATE": 1,
                 "LZ_PROD_API_BASE_URL": "https://prod-api-eus2-backend.labelzoom.net",
                 "ENVIRONMENT": "production",
+                "S3_BUCKET": "https://labelzoom-packages.s3.us-east-2.amazonaws.com",
             },
             "limits": {
                 "cpu_ms": 100