server.lua

--[[
  FiveHub API client - server side.
  Exports: ListAssets, GetAsset, GetAssetUrl, DeleteAsset
  Usage from another resource:
    exports.fivehub:ListAssets(function(err, data) ... end)
    exports.fivehub:GetAsset(assetId, function(err, asset) ... end)
    exports.fivehub:GetAssetUrl(assetId, expiresIn, function(err, data) ... end)
    exports.fivehub:DeleteAsset(assetId, function(err) ... end)
]]

local function buildHeaders(includeJsonContentType)
  local headers = {
    ["X-API-KEY"] = Config.ApiKey,
  }
  if Config.OrganizationId and Config.OrganizationId ~= "" then
    headers["X-Organization-Id"] = Config.OrganizationId
  end
  if includeJsonContentType then
    headers["Content-Type"] = "application/json"
  end
  return headers
end

local function parseJsonBody(body)
  if not body or body == "" then
    return nil
  end
  local ok, decoded = pcall(json.decode, body)
  if not ok or not decoded then
    return nil
  end
  return decoded
end

local function request(method, path, body, contentType, cb)
  local url = Config.BaseUrl:gsub("/$", "") .. path
  local headers = buildHeaders(not body or contentType == "application/json")
  if contentType and contentType ~= "application/json" then
    headers["Content-Type"] = contentType
  end

  PerformHttpRequest(url, {
    method = method,
    headers = headers,
    data = body,
  }, function(statusCode, responseBody, responseHeaders)
    if statusCode >= 200 and statusCode < 300 then
      local data = parseJsonBody(responseBody)
      cb(nil, data)
    else
      local data = parseJsonBody(responseBody)
      local msg = (data and data.error) or ("HTTP " .. tostring(statusCode))
      cb(msg, nil)
    end
  end)
end

local function encodeQuery(t)
  local parts = {}
  for k, v in pairs(t) do
    table.insert(parts, string.format("%s=%s", k, v))
  end
  return table.concat(parts, "&")
end

-- List assets (limit, offset)
exports("ListAssets", function(options, cb)
  if type(options) == "function" then
    cb = options
    options = {}
  end
  options = options or {}
  local limit = math.min(tonumber(options.limit) or 50, 100)
  local offset = tonumber(options.offset) or 0
  local path = "/api/assets?" .. encodeQuery({ limit = limit, offset = offset })
  request("GET", path, nil, nil, cb)
end)

-- Get single asset by ID
exports("GetAsset", function(assetId, cb)
  if type(assetId) ~= "string" or assetId == "" then
    return cb("assetId is required", nil)
  end
  local path = "/api/assets/" .. assetId
  request("GET", path, nil, nil, cb)
end)

-- Get signed URL for asset (expiresIn in seconds, default 3600)
exports("GetAssetUrl", function(assetId, expiresIn, cb)
  if type(assetId) ~= "string" or assetId == "" then
    return cb("assetId is required", nil)
  end
  if type(expiresIn) == "function" then
    cb = expiresIn
    expiresIn = 3600
  end
  expiresIn = tonumber(expiresIn) or 3600
  local path = "/api/assets/" .. assetId .. "/url?expiresIn=" .. tostring(expiresIn)
  request("GET", path, nil, nil, cb)
end)

-- Delete asset by ID
exports("DeleteAsset", function(assetId, cb)
  if type(assetId) ~= "string" or assetId == "" then
    return cb("assetId is required")
  end
  local path = "/api/assets/" .. assetId
  request("DELETE", path, nil, nil, function(err, _)
    cb(err)
  end)
end)