import { readFile } from 'node:fs/promises'
import { resolve, extname } from 'node:path'
import { existsSync } from 'node:fs'

const MIME: Record<string, string> = {
  '.jpg': 'image/jpeg',
  '.jpeg': 'image/jpeg',
  '.png': 'image/png',
  '.gif': 'image/gif',
  '.webp': 'image/webp',
  '.avif': 'image/avif',
  '.svg': 'image/svg+xml',
}

export default defineEventHandler(async (event) => {
  const url = getRequestURL(event)
  const pathMatch = url.pathname.match(/^\/posts\/([a-z0-9-]+)\/img\/(.+)$/)
  if (!pathMatch) return

  const [, slug, filename] = pathMatch

  // 防止路径遍历攻击
  if (filename.includes('..') || filename.includes('/') || filename.includes('\\')) {
    throw createError({ statusCode: 400 })
  }

  const ext = extname(filename).toLowerCase()
  if (!MIME[ext]) return

  const filePath = resolve('content/posts', slug, 'img', filename)
  if (!existsSync(filePath)) {
    throw createError({ statusCode: 404 })
  }

  const data = await readFile(filePath)
  setResponseHeader(event, 'content-type', MIME[ext])
  setResponseHeader(event, 'cache-control', 'public, max-age=31536000')
  return data
})