Method createHandler

src/Routers/FilesRouter.js:370–502

(req, res, next)

  }

  async createHandler(req, res, next) {
    if (req.auth.isReadOnly) {
      const error = createSanitizedHttpError(403, "read-only masterKey isn't allowed to create a file.", req.config);
      res.status(error.status);
      res.end(`{"error":"${error.message}"}`);
      return;
    }
    const config = req.config;
    const isMaster = req.auth.isMaster;
    const isMaintenance = req.auth.isMaintenance;
    if (!isMaster && !isMaintenance) {
      const user = req.auth.user;
      const isLinked = user && Parse.AnonymousUtils.isLinked(user);
      if (!config.fileUpload.enableForAnonymousUser && isLinked) {
        next(
          new Parse.Error(Parse.Error.FILE_SAVE_ERROR, 'File upload by anonymous user is disabled.')
        );
        return;
      }
      if (!config.fileUpload.enableForAuthenticatedUser && !isLinked && user) {
        next(
          new Parse.Error(
            Parse.Error.FILE_SAVE_ERROR,
            'File upload by authenticated user is disabled.'
          )
        );
        return;
      }
      if (!config.fileUpload.enableForPublic && !user) {
        next(new Parse.Error(Parse.Error.FILE_SAVE_ERROR, 'File upload by public is disabled.'));
        return;
      }
    }
    const filesController = config.filesController;
    const { filename } = req.params;
    const contentType = req.get('Content-type');

    const error = filesController.validateFilename(filename);
    if (error) {
      next(error);
      return;
    }

    const fileExtensions = config.fileUpload?.fileExtensions;
    if (!isMaster && fileExtensions) {
      const isValidExtension = extension => {
        return fileExtensions.some(ext => {
          if (ext === '*') {
            return true;
          }
          const regex = new RegExp(ext);
          if (regex.test(extension)) {
            return true;
          }
        });
      };
      let extension = contentType;
      if (filename && filename.includes('.')) {