Method snippet

src/FileRise/Http/Controllers/FileController.php:3829–4018

()

    }

    public function snippet(): void
    {
        header('Content-Type: application/json; charset=utf-8');
        if (!$this->requireAuth()) {
            return;
        }

        $storage = StorageRegistry::getAdapter();

        // Session -> snapshot user + perms -> release lock
        if (session_status() !== PHP_SESSION_ACTIVE) {
            @session_start();
        }

        $user  = (string)($_SESSION['username'] ?? '');
        $perms = loadUserPermissions($user) ?: [];
        $perms['role'] = $_SESSION['role'] ?? ($perms['role'] ?? null);
        $perms['admin'] = $_SESSION['admin'] ?? ($perms['admin'] ?? null);
        $perms['isAdmin'] = $_SESSION['isAdmin'] ?? ($perms['isAdmin'] ?? null);

        @session_write_close();

        // ---- Input ----
        $folder = isset($_GET['folder']) ? (string)$_GET['folder'] : 'root';
        $folder = str_replace('\\', '/', trim($folder));
        $folder = ($folder === '' || $folder === 'root') ? 'root' : trim($folder, '/');

        $file = isset($_GET['file']) ? (string)$_GET['file'] : '';
        $file = trim($file);

        if ($file === '') {
            http_response_code(400);
            echo json_encode(['error' => 'Missing file parameter.']);
            return;
        }

        // ---- ACL ----
        if (class_exists('ACL')) {
            $folderNorm = ACL::normalizeFolder($folder);
            $accessErr = $this->enforceSingleFileReadAccess($folderNorm, $file, $user, $perms);
            if ($accessErr !== null) {
                http_response_code(403);
                echo json_encode(['error' => $accessErr]);
                return;
            }
            $folder = $folderNorm;
        }

        // ---- Resolve file via model ----
        try {
            $info = FileModel::getDownloadInfo($folder, $file);
        } catch (\Throwable $e) {
            http_response_code(500);
            echo json_encode(['error' => 'Internal error.']);
            return;
        }

        if (!is_array($info) || !empty($info['error'] ?? null)) {