package api import ( "net/http" "github.com/gin-gonic/gin" "github.com/gin-gonic/gin/binding" "github.com/photoprism/photoprism/internal/acl" "github.com/photoprism/photoprism/internal/entity" "github.com/photoprism/photoprism/internal/event" "github.com/photoprism/photoprism/internal/form" "github.com/photoprism/photoprism/internal/i18n" "github.com/photoprism/photoprism/internal/search" "github.com/photoprism/photoprism/internal/service" ) // SearchPhotos searches the pictures index and returns the result as JSON. // See form.SearchPhotos for supported search params and data types. // // GET /api/v1/photos func SearchPhotos(router *gin.RouterGroup) { // searchPhotos checking authorization and parses the search request. searchForm := func(c *gin.Context) (f form.SearchPhotos, s *entity.Session, err error) { s = AuthAny(c, acl.ResourcePhotos, acl.Permissions{acl.ActionSearch, acl.ActionView, acl.AccessShared}) // Abort if permission was not granted. if s.Abort(c) { return f, s, i18n.Error(i18n.ErrForbidden) } // Abort if request params are invalid. if err = c.MustBindWith(&f, binding.Form); err != nil { event.AuditWarn([]string{ClientIP(c), "session %s", string(acl.ResourcePhotos), "form invalid", "%s"}, s.RefID, err) AbortBadRequest(c) return f, s, err } // Ignore private flag if feature is disabled. if !service.Config().Settings().Features.Private { f.Public = false } return f, s, nil } // defaultHandler a standard JSON result with all fields. defaultHandler := func(c *gin.Context) { f, s, err := searchForm(c) // Abort if authorization or form are invalid. if err != nil { return } // Find matching pictures. result, count, err := search.UserPhotos(f, s) // Ok? if err != nil { event.AuditWarn([]string{ClientIP(c), "session %s", string(acl.ResourcePhotos), "search", "%s"}, s.RefID, err) AbortBadRequest(c) return } // Add response headers. AddCountHeader(c, count) AddLimitHeader(c, f.Count) AddOffsetHeader(c, f.Offset) AddTokenHeaders(c) // Return as JSON. c.JSON(http.StatusOK, result) } // viewHandler returns a photo viewer formatted result. viewHandler := func(c *gin.Context) { f, s, err := searchForm(c) // Abort if authorization or form are invalid. if err != nil { return } conf := service.Config() result, count, err := search.UserPhotosViewerResults(f, s, conf.ContentUri(), conf.ApiUri(), conf.PreviewToken(), conf.DownloadToken()) if err != nil { event.AuditWarn([]string{ClientIP(c), "session %s", string(acl.ResourcePhotos), "view", "%s"}, s.RefID, err) AbortBadRequest(c) return } // Add response headers. AddCountHeader(c, count) AddLimitHeader(c, f.Count) AddOffsetHeader(c, f.Offset) AddTokenHeaders(c) // Return as JSON. c.JSON(http.StatusOK, result) } // Register route handlers. router.GET("/photos", defaultHandler) router.GET("/photos/view", viewHandler) }