Fayllar (UploadFile)
UploadFile va File, fayl validatsiyasi (tur, hajm), xavfsiz saqlash, yuklab olish (FileResponse)
10-sinfAdvanced Python Back-end6-hafta · 16-darsBugun nimalarni o'rganamiz?
UploadFile va File
Fayl qabul qilish
Validatsiya va xavfsiz saqlash
Tur, hajm, nom
Yuklab olish
FileResponse
Takrorlash
limit ga nima uchun yuqori chegara (le=100) qo'yamiz?
limit=1000000 bilan serverni yuklash mumkin.UploadFile va File
Fayl qabul qilish
Fayl yo'li
Fayl qabul qilish
from fastapi import FastAPI, File, UploadFile
app = FastAPI()
@app.post("/books/{book_id}/cover")
async def upload_cover(book_id: int, file: UploadFile = File(...)):
data = await file.read()
return {"filename": file.filename,
"type": file.content_type,
"size": len(data)}
Body (JSON) bilan File ni aralashtirib bo'lmaydi: qo'shimcha maydonlar Form(...) bilan beriladi.Mini-test
Fayl yuklash uchun qaysi paket kerak?
python-multipart kerak.Validatsiya va xavfsiz saqlash
Tur, hajm, nom
Tekshiruv zanjiri
Validatsiya va saqlash
ALLOWED = {"image/jpeg": ".jpg", "image/png": ".png"}
MAX_SIZE = 2 * 1024 * 1024
ext = ALLOWED.get(file.content_type)
if ext is None:
raise HTTPException(415, "Faqat JPEG yoki PNG")
data = await file.read(MAX_SIZE + 1)
if len(data) > MAX_SIZE:
raise HTTPException(413, "Fayl 2 MB dan katta")
name = f"{book_id}_{uuid4().hex}{ext}"
(UPLOAD_DIR / name).write_bytes(data)
content_type ni mijoz yuboradi, uni soxtalashtirish mumkin: jiddiy loyihada fayl sarlavhasi (magic bytes) ham tekshiriladi.Mini-test
Fayl hajmi chegaradan oshsa qaysi status qaytariladi?
Yuklab olish
FileResponse
Yuklab olish
Xavfsiz yuklab olish
@app.get("/files/{name}")
async def download(name: str):
path = (UPLOAD_DIR / name).resolve()
if path.parent != UPLOAD_DIR.resolve() or not path.is_file():
raise HTTPException(404, "Fayl topilmadi")
return FileResponse(path)
get_current_user bilan egasini ham tekshiring.Mini-test
Path traversal nima?
bytes va UploadFile
bytes
Butun fayl xotiraga olinadiUploadFile
Katta fayl diskda turadi,filename va content_type borFayl uchun UploadFile tavsiya etiladi.
Atamalar. Bosing
UploadFile
bosingYuklangan faylni ifodalovchi obyekt
multipart
bosingFayl yuboriladigan so'rov formati
413
bosingFayl juda katta
415
bosingFayl turi qo'llab-quvvatlanmaydi
Yuklash endpointini yozish
1. Qabul qiling
UploadFile = File(...).
2. Tekshiring
Tur va hajm.
3. Saqlang
uuid4 nomi bilan.
Fayl xatolari
| Holat | Status | Sabab |
|---|---|---|
| Tur noto'g'ri | 415 | ruxsat etilmagan content_type |
| Hajm katta | 413 | MAX_SIZE dan oshdi |
| Fayl yo'q | 404 | yo'l noto'g'ri |
| Muvaffaqiyat | 201 | fayl saqlandi |
| Fayl yuborilmadi | 422 | file maydoni yo'q |
Pastga bosing: statuslar
Swagger da sinash
uvicorn app.main:app --reloadni ishga tushiring./docsdaPOST /books/1/coverga PNG yuklang./files/<nom>bilan yuklab oling;.txtbilan 415 ni tekshiring.
Xavfsiz nom
path = UPLOAD_DIR / file.filename
Xavfsiz nom
path = UPLOAD_DIR / f"{uuid4().hex}.png"
Fayllar raqamlarda
Foydalanuvchi yuborgan hamma narsani tekshiring.
Amaliy topshiriq 20 daqiqa
/upload endpointi yozing: fayl nomi va hajmini qaytarsin.uuid4 nomi bilan saqlang./files/{name} endpointini path traversal dan himoyalab yozing.Book.cover maydoniga fayl nomini yozing.Dars xulosasi
Qabul
UploadFile = File(...), python-multipart.
Tekshiruv
Tur (415), hajm (413), uuid4 nomi.
Yuklab olish
FileResponse va path traversal himoyasi.
Uyga vazifa: Fayl yuklash va yuklab olish.
Keyingi dars: Loyihani yakunlash
Struktura, sozlamalar, xatolar
6-hafta · 17-dars