Method ResolveDataPath

Modules/RESTAPI/src/mitkDataStorageController.cpp:721–877

}

DataStorageController::ResolveDataPathResult DataStorageController::ResolveDataPath(
  const httplib::Request& req, const std::string& contentType)
{
  ResolveDataPathResult result;
  result.success = false;
  result.isTemporary = false;
  result.errorStatus = 0;

  const bool isFileReference = (contentType.find(MIME_APPLICATION_JSON) != std::string::npos);
  const bool isDirectTransfer = (contentType.find(MIME_APPLICATION_OCTET_STREAM) != std::string::npos);

  if (isFileReference)
  {
    // Parse JSON body to get file path
    nlohmann::json body;
    try
    {
      body = nlohmann::json::parse(req.body);
    }
    catch (const nlohmann::json::parse_error& e)
    {
      result.errorStatus = 400;
      result.errorResponse = ErrorResponse::InvalidRequest(
        "Invalid JSON: " + std::string(e.what()), req.path);
      return result;
    }

    // Validate transfer mode if specified
    if (body.contains(JSON_KEY_TRANSFER) && body[JSON_KEY_TRANSFER].contains(JSON_KEY_MODE))
    {
      const std::string specifiedMode = body[JSON_KEY_TRANSFER][JSON_KEY_MODE].get<std::string>();
      if (specifiedMode != TRANSFER_MODE_DIRECT && specifiedMode != TRANSFER_MODE_FILE_REFERENCE)
      {
        result.errorStatus = 406;
        result.errorResponse = ErrorResponse::TransferModeNotAvailable(
          specifiedMode, {TRANSFER_MODE_FILE_REFERENCE, TRANSFER_MODE_DIRECT}, req.path);
        return result;
      }
    }

    if (!body.contains(JSON_KEY_TRANSFER) || !body[JSON_KEY_TRANSFER].contains(JSON_KEY_FILE_PATH))
    {
      result.errorStatus = 400;
      result.errorResponse = ErrorResponse::InvalidRequest(
        "Missing transfer.file_path in request body", req.path);
      return result;
    }

    const fs::path filePath(body[JSON_KEY_TRANSFER][JSON_KEY_FILE_PATH].get<std::string>());

    if (!fs::exists(filePath))
    {
      result.errorStatus = 422;
      result.errorResponse = ErrorResponse::FileNotFound(filePath.string(), req.path);
      return result;
    }

    // Validate file path against access restrictions