Nestjs 图像验证-解网

问：

我创建了一个端点来上传头像，控制器是这样的：

  @Post('/avatar')
  @UseInterceptors(
    FileInterceptor('file', {
      storage: diskStorage({
        destination: './public/avatars',
        filename: (req, file, cb) => {
          const { user } = req as unknown as { user: typeof ReqUser };
          const { id } = user as unknown as { id: string };

          const filename: string = id;
          const extension: string = path.parse(file.originalname).ext;
          cb(null, `${filename}${extension}`);
        },
      }),
    }),
  )
  async uploadAvatar(
    @UploadedFile(
      new ParseFilePipe({
        validators: [
          new MaxFileSizeValidator({ maxSize: 5000000 }),
          new FileTypeValidator({ fileType: /image\/(jpeg|png|jpg)/ }),
        ],
      }),
    )
    file: Express.Multer.File,
    @ReqUser() user,
  ) {
    return this.meService.setAvatar(file, user);
  }

我面临的问题是，如果文件无效，将抛出相应的错误，但文件将上传到服务器上，例如，它应该只允许上传带有 .jpg，png，jpg 扩展名的图像，但文件还是会上传？在这种情况下，我做错了什么？

图片上传 nestjs

@Post('/avatar')
@UseInterceptors(
  FileInterceptor('file', {
    fileFilter: (req, file, cb) => {
      // Write your condition below based on the mimetype and/or filename extension.
      if (<YOUR_CONDITION_TO_REJECT_THE_FILE>) {
        cb(null, false);
      } else {
        cb(null, true);
      }
    },
    storage: diskStorage({
      destination: './public/avatars',
      filename: (req, file, cb) => {
        const { user } = req as unknown as { user: typeof ReqUser };
        const { id } = user as unknown as { id: string };

        const filename: string = id;
        const extension: string = path.parse(file.originalname).ext;
        cb(null, `${filename}${extension}`);
      },
    }),
  })
)
async uploadAvatar(
  ...

这将防止 Multer 首先将文件保存在您的服务器中。这样，如果文件类型错误，则无需处理删除文件。

Nestjs 图像验证

Nestjs Image Validation

评论

评论