Snapshot of main at 9f39a6e1e (2026-11-02)

app/Http/Controllers/WireChatAttachmentController.php

@@ -0,0 +1,51 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Storage;
+use Namu\WireChat\Facades\WireChat;
+use Namu\WireChat\Models\Attachment;
+
+class WireChatAttachmentController extends Controller
+{
+    public function serve(Request $request, Attachment $attachment)
+    {
+        $profile = getActiveProfile();
+
+        abort_unless($profile !== null, 403);
+
+        // Verify the active profile is a participant in the conversation this attachment belongs to
+        $message = $attachment->attachable;
+
+        abort_unless($message !== null, 404);
+
+        $conversation = $message->conversation;
+
+        abort_unless($conversation !== null, 404);
+        abort_unless($profile->belongsToConversation($conversation), 403);
+
+        $disk = Storage::disk(WireChat::storageDisk());
+
+        abort_unless($disk->exists($attachment->file_path), 404);
+
+        $absolutePath = $disk->path($attachment->file_path);
+        $mimeType = $attachment->mime_type;
+        $fileSize = filesize($absolutePath);
+
+        // Use StreamedResponse so we can flush any stray OB content before sending binary data.
+        // BinaryFileResponse writes to php://output which respects active output buffers,
+        // so any pre-existing OB content (e.g. from middleware) would prepend to the binary file.
+        return response()->stream(function () use ($absolutePath) {
+            while (ob_get_level() > 0) {
+                ob_end_clean();
+            }
+            readfile($absolutePath);
+        }, 200, [
+            'Content-Type' => $mimeType,
+            'Content-Length' => $fileSize,
+            'Cache-Control' => 'private, max-age=3600',
+            'Accept-Ranges' => 'none',
+        ]);
+    }
+}