media-rip/backend/app/routers/cookies.py
xpltd 5a6eb00906 Docker self-hosting: fix persistence, add data_dir config
Critical fix:
- Dockerfile env var was MEDIARIP__DATABASE__PATH (ignored) — now MEDIARIP__SERVER__DB_PATH
  DB was landing at /app/mediarip.db (lost on restart) instead of /data/mediarip.db

Persistence model:
- /downloads → media files (bind mount recommended)
- /data → SQLite DB, session cookies, error logs (named volume)
- /themes → custom CSS themes (read-only bind mount)
- /app/config.yaml → optional YAML config (read-only bind mount)

Other changes:
- Add server.data_dir config field (default: /data) for explicit session storage
- Cookie storage uses data_dir instead of fragile path math from output_dir parent
- Lifespan creates data_dir on startup
- .dockerignore excludes tests, dev DB, egg-info
- docker-compose.yml: inline admin/purge config examples
- docker-compose.example.yml: parameterized with env vars
- .env.example: session mode, clearer docs
- README: Docker volumes table, admin setup docs, full config reference
- PROJECT.md: reflects completed v1.0 state
- REQUIREMENTS.md: all 26 requirements validated
2026-03-19 09:56:10 -05:00

73 lines
2.2 KiB
Python

"""Cookie auth — per-session cookies.txt upload for authenticated downloads (R008)."""
from __future__ import annotations
import logging
from pathlib import Path
from fastapi import APIRouter, Depends, Request, UploadFile
from app.dependencies import get_session_id
logger = logging.getLogger("mediarip.cookies")
router = APIRouter(tags=["cookies"])
def _cookie_path(data_dir: str, session_id: str) -> Path:
"""Return the cookies.txt path for a session."""
return Path(data_dir) / "sessions" / session_id / "cookies.txt"
@router.post("/cookies")
async def upload_cookies(
request: Request,
file: UploadFile,
session_id: str = Depends(get_session_id),
) -> dict:
"""Upload a Netscape-format cookies.txt for the current session.
File is stored at {data_dir}/sessions/{session_id}/cookies.txt.
CRLF line endings are normalized to LF.
"""
content = await file.read()
# Normalize CRLF → LF
text = content.decode("utf-8", errors="replace").replace("\r\n", "\n")
config = request.app.state.config
cookie_file = _cookie_path(config.server.data_dir, session_id)
cookie_file.parent.mkdir(parents=True, exist_ok=True)
cookie_file.write_text(text, encoding="utf-8")
logger.info("Cookie file uploaded for session %s (%d bytes)", session_id, len(text))
return {"status": "ok", "session_id": session_id, "size": len(text)}
@router.delete("/cookies")
async def delete_cookies(
request: Request,
session_id: str = Depends(get_session_id),
) -> dict:
"""Delete the cookies.txt for the current session."""
config = request.app.state.config
cookie_file = _cookie_path(config.server.data_dir, session_id)
if cookie_file.is_file():
cookie_file.unlink()
logger.info("Cookie file deleted for session %s", session_id)
return {"status": "deleted"}
return {"status": "not_found"}
def get_cookie_path_for_session(data_dir: str, session_id: str) -> str | None:
"""Return the cookies.txt path if it exists for a session, else None.
Called by DownloadService to pass cookiefile to yt-dlp.
"""
path = _cookie_path(data_dir, session_id)
if path.is_file():
return str(path)
return None