Method expressRouter

src/Routers/FilesRouter.js:89–134

({ maxUploadSize = '20Mb' } = {})

export class FilesRouter {
  expressRouter({ maxUploadSize = '20Mb' } = {}) {
    var router = express.Router();
    // Lightweight info initializer so handleParseSession can resolve session tokens.
    // Unlike POST/DELETE routes, GET file routes skip handleParseHeaders (which
    // normally sets req.info) because those requests may not carry Parse headers.
    const initInfo = (req, res, next) => {
      if (!req.info) {
        const sessionToken = req.get('X-Parse-Session-Token');
        req.info = {
          sessionToken,
          installationId: req.get('X-Parse-Installation-Id'),
        };
        // If no session token and no auth yet (public access), set a minimal
        // auth object so handleParseSession skips session resolution.
        if (!sessionToken && !req.auth) {
          req.auth = { isMaster: false };
        }
      }
      next();
    };
    // Metadata route must come before the catch-all GET route
    router.get('/files/:appId/metadata/*filepath', initInfo, Middlewares.handleParseSession, this.metadataHandler);
    router.get('/files/:appId/*filepath', initInfo, Middlewares.handleParseSession, this.getHandler);

    router.post('/files', function (req, res, next) {
      next(new Parse.Error(Parse.Error.INVALID_FILE_NAME, 'Filename not provided.'));
    });

    router.post(
      '/files/:filename',
      this._earlyHeadersMiddleware(),
      this._bodyParsingMiddleware(maxUploadSize),
      Middlewares.handleParseHeaders,
      Middlewares.handleParseSession,
      this.createHandler.bind(this)
    );

    router.delete(
      '/files/*filepath',
      Middlewares.handleParseHeaders,
      Middlewares.handleParseSession,
      Middlewares.enforceMasterKeyAccess,
      this.deleteHandler
    );
    return router;
  }

  static _getFilenameFromParams(req) {
    const parts = req.params.filepath;