folders.controller.ts

import { Controller, ForbiddenException, Get, Inject, NotFoundException, Param, Res } from "@nestjs/common";
import { Response } from "express";

import { CurrentUserInterface } from "../../auth/current-user/current-user";
import { GetCurrentUser } from "../../auth/decorators/get-current-user.decorator";
import { ACCESS_CONTROL_SERVICE } from "../../user-permissions/user-permissions.constants";
import { AccessControlServiceInterface } from "../../user-permissions/user-permissions.types";
import { FoldersService } from "./folders.service";

@Controller("dam/folders")
export class FoldersController {
    constructor(
        private readonly foldersService: FoldersService,
        @Inject(ACCESS_CONTROL_SERVICE) private accessControlService: AccessControlServiceInterface,
    ) {}

    @Get("/:folderId/zip")
    async createZip(@Param("folderId") folderId: string, @Res() res: Response, @GetCurrentUser() user: CurrentUserInterface): Promise<void> {
        const folder = await this.foldersService.findOneById(folderId);
        if (!folder) {
            throw new NotFoundException("Folder not found");
        }

        if (folder.scope && !this.accessControlService.isAllowed(user, "dam", folder.scope)) {
            throw new ForbiddenException("The current user is not allowed to access this scope and download this folder.");
        }

        const zipStream = await this.foldersService.createZipStreamFromFolder(folderId);

        res.setHeader("Content-Disposition", `attachment; filename="${folder.name}.zip"`);
        res.setHeader("Content-Type", "application/zip");
        zipStream.pipe(res);
    }
}