PublicApi: Add GET /api/v2/notes/{note}/media

Signed-off-by: Philip Molares <philip.molares@udo.edu>

src/api/public/notes/notes.controller.ts

@@ -60,6 +60,8 @@ import {
   successfullyDeletedDescription,
   unauthorizedDescription,
 } from '../../utils/descriptions';
+import { MediaUploadDto } from '../../../media/media-upload.dto';
+import { MediaService } from '../../../media/media.service';
 
 @ApiTags('notes')
 @ApiSecurity('token')
@@ -71,6 +73,7 @@ export class NotesController {
     private revisionsService: RevisionsService,
     private permissionsService: PermissionsService,
     private historyService: HistoryService,
+    private mediaService: MediaService,
   ) {
     this.logger.setContext(NotesController.name);
   }
@@ -389,4 +392,31 @@ export class NotesController {
       throw e;
     }
   }
+
+  @UseGuards(TokenAuthGuard)
+  @Get(':noteIdOrAlias/media')
+  @ApiOkResponse({
+    description: 'All media uploads of the note',
+    isArray: true,
+    type: MediaUploadDto,
+  })
+  @ApiUnauthorizedResponse({ description: unauthorizedDescription })
+  async getNotesMedia(
+    @Req() req: Request,
+    @Param('noteIdOrAlias') noteIdOrAlias: string,
+  ): Promise<MediaUploadDto[]> {
+    try {
+      const note = await this.noteService.getNoteByIdOrAlias(noteIdOrAlias);
+      if (!this.permissionsService.mayRead(req.user, note)) {
+        throw new UnauthorizedException('Reading note denied!');
+      }
+      const media = await this.mediaService.listUploadsByNote(note);
+      return media.map((media) => this.mediaService.toMediaUploadDto(media));
+    } catch (e) {
+      if (e instanceof NotInDBError) {
+        throw new NotFoundException(e.message);
+      }
+      throw e;
+    }
+  }
 }