Rocket.Chat/app/lib/server/functions/setUserAvatar.ts

import { Meteor } from 'meteor/meteor';
import { fetch } from 'meteor/fetch';

import { RocketChatFile } from '../../../file/server';
import { FileUpload } from '../../../file-upload/server';
import { Users } from '../../../models/server';
import { SystemLogger } from '../../../../server/lib/logger/system';
import { api } from '../../../../server/sdk/api';
import { IUser } from '../../../../definition/IUser';

export const setUserAvatar = function (
	user: Pick<IUser, '_id' | 'username'>,
	dataURI: string,
	contentType: string,
	service: 'initials' | 'url' | 'rest' | string,
	etag?: string,
): void {
	if (service === 'initials') {
		Users.setAvatarData(user._id, service, null);
		return;
	}

	const { buffer, type } = Promise.await(
		(async (): Promise<{ buffer: Buffer; type: string }> => {
			if (service === 'url') {
				let response: Response;
				try {
					response = await fetch(dataURI);
				} catch (e) {
					SystemLogger.info(`Not a valid response, from the avatar url: ${encodeURI(dataURI)}`);
					throw new Meteor.Error('error-avatar-invalid-url', `Invalid avatar URL: ${encodeURI(dataURI)}`, {
						function: 'setUserAvatar',
						url: dataURI,
					});
				}

				if (response.status !== 200) {
					if (response.status !== 404) {
						SystemLogger.info(`Error while handling the setting of the avatar from a url (${encodeURI(dataURI)}) for ${user.username}`);
						throw new Meteor.Error(
							'error-avatar-url-handling',
							`Error while handling avatar setting from a URL (${encodeURI(dataURI)}) for ${user.username}`,
							{ function: 'RocketChat.setUserAvatar', url: dataURI, username: user.username },
						);
					}

					SystemLogger.info(`Not a valid response, ${response.status}, from the avatar url: ${dataURI}`);
					throw new Meteor.Error('error-avatar-invalid-url', `Invalid avatar URL: ${dataURI}`, {
						function: 'setUserAvatar',
						url: dataURI,
					});
				}

				if (!/image\/.+/.test(response.headers.get('content-type') || '')) {
					SystemLogger.info(
						`Not a valid content-type from the provided url, ${response.headers.get('content-type')}, from the avatar url: ${dataURI}`,
					);
					throw new Meteor.Error('error-avatar-invalid-url', `Invalid avatar URL: ${dataURI}`, {
						function: 'setUserAvatar',
						url: dataURI,
					});
				}

				return {
					buffer: Buffer.from(await response.arrayBuffer()),
					type: response.headers.get('content-type') || '',
				};
			}

			if (service === 'rest') {
				return {
					buffer: Buffer.from(dataURI, 'binary'),
					type: contentType,
				};
			}

			const fileData = RocketChatFile.dataURIParse(dataURI);

			return {
				buffer: Buffer.from(fileData.image, 'base64'),
				type: fileData.contentType,
			};
		})(),
	);

	const fileStore = FileUpload.getStore('Avatars');
	fileStore.deleteByName(user.username);

	const file = {
		userId: user._id,
		type,
		size: buffer.length,
	};

	const result = fileStore.insertSync(file, buffer);

	const avatarETag = etag || result?.etag || null;

	Meteor.setTimeout(function () {
		Users.setAvatarData(user._id, service, avatarETag);
		api.broadcast('user.avatarUpdate', {
			username: user.username,
			avatarETag,
		});
	}, 500);
};