Hello,
{current_user.username} has shared a {item_type} with you: {item_name}
Permission level: {share_in.permission_level}
Access {item_type.capitalize()}
{f'Password: {share_in.password}
' if share_in.password else ''}This link is valid{expiry_text}.
MyWebdav File Sharing Service
""" try: await send_email( to_email=share_in.invite_email, subject=f"{current_user.username} shared {item_name} with you", body=email_body, html=email_html, ) except Exception as e: print(f"Failed to send invitation email: {e}") return await ShareOut.from_tortoise_orm(share) @router.get("/my", response_model=List[ShareOut]) async def list_my_shares(current_user: User = Depends(get_current_user)): shares = await Share.filter(owner=current_user).order_by("-created_at") return [await ShareOut.from_tortoise_orm(share) for share in shares] @router.get("/{share_token}", response_model=ShareOut) async def get_share_link_info(share_token: str): share = await Share.get_or_none(token=share_token) if not share: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="Share link not found" ) if share.expires_at and share.expires_at < datetime.utcnow(): raise HTTPException( status_code=status.HTTP_410_GONE, detail="Share link has expired" ) # Increment access count share.access_count += 1 await share.save() return await ShareOut.from_tortoise_orm(share) @router.put("/{share_id}", response_model=ShareOut) async def update_share( share_id: int, share_in: ShareCreate, current_user: User = Depends(get_current_user) ): share = await Share.get_or_none(id=share_id, owner=current_user) if not share: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="Share link not found or does not belong to you", ) if share_in.expires_at is not None: share.expires_at = share_in.expires_at if share_in.password is not None: share.hashed_password = get_password_hash(share_in.password) share.password_protected = True elif share_in.password == "": # Allow clearing password share.hashed_password = None share.password_protected = False if share_in.permission_level is not None: share.permission_level = share_in.permission_level await share.save() return await ShareOut.from_tortoise_orm(share) @router.post("/{share_token}/access") async def access_shared_content(share_token: str, password: Optional[str] = None): share = await Share.get_or_none(token=share_token) if not share: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="Share link not found" ) if share.expires_at and share.expires_at < datetime.utcnow(): raise HTTPException( status_code=status.HTTP_410_GONE, detail="Share link has expired" ) if share.password_protected: if not password or not verify_password(password, share.hashed_password): raise HTTPException( status_code=status.HTTP_401_UNAUTHORIZED, detail="Incorrect password" ) result = {"message": "Access granted", "permission_level": share.permission_level} if share.file_id: file = await File.get_or_none(id=share.file_id, is_deleted=False) if not file: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="File not found" ) result["file"] = await FileOut.from_tortoise_orm(file) result["type"] = "file" elif share.folder_id: folder = await Folder.get_or_none(id=share.folder_id, is_deleted=False) if not folder: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="Folder not found" ) result["folder"] = await FolderOut.from_tortoise_orm(folder) result["type"] = "folder" files = await File.filter(parent=folder, is_deleted=False) subfolders = await Folder.filter(parent=folder, is_deleted=False) result["files"] = [await FileOut.from_tortoise_orm(f) for f in files] result["folders"] = [await FolderOut.from_tortoise_orm(f) for f in subfolders] return result @router.get("/{share_token}/download") async def download_shared_file(share_token: str, password: Optional[str] = None): share = await Share.get_or_none(token=share_token) if not share: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="Share link not found" ) if share.expires_at and share.expires_at < datetime.utcnow(): raise HTTPException( status_code=status.HTTP_410_GONE, detail="Share link has expired" ) if share.password_protected: if not password or not verify_password(password, share.hashed_password): raise HTTPException( status_code=status.HTTP_401_UNAUTHORIZED, detail="Incorrect password" ) if not share.file_id: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="This share is not for a file", ) file = await File.get_or_none(id=share.file_id, is_deleted=False) if not file: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="File not found" ) owner = await User.get(id=file.owner_id) try: async def file_iterator(): async for chunk in storage_manager.get_file(owner.id, file.path): yield chunk return StreamingResponse( content=file_iterator(), media_type=file.mime_type, headers={"Content-Disposition": f'attachment; filename="{file.name}"'}, ) except FileNotFoundError: raise HTTPException(status_code=404, detail="File not found in storage") @router.delete("/{share_id}", status_code=status.HTTP_204_NO_CONTENT) async def delete_share_link( share_id: int, current_user: User = Depends(get_current_user) ): share = await Share.get_or_none(id=share_id, owner=current_user) if not share: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="Share link not found or does not belong to you", ) await share.delete() return