Use multipart crate for upload

Cargo.toml

@@ -27,7 +27,8 @@ fs2 = "^0.4.2"
 rust-crypto = "^0.2.36"
 zip = "^0.1.0"
 lazy_static = "^0.2.5"
-params = "^0.6.0"
+params = "0.6.0"
+multipart = { version = "^0.13.1", features = ["iron"] }
 semver = { git = "https://github.com/MPIB/semver.git", rev = "65820b04b0a09d35d12df81a3c45aa7564f4a491" }
 quick-error = "^1.2.0"
 clap = "=2.26.0"

src/main.rs

@@ -35,6 +35,7 @@ extern crate fs2;
 extern crate crypto;
 extern crate zip;
 extern crate params;
+extern crate multipart;
 extern crate semver;
 extern crate mustache;
 extern crate lazysort;

src/web/server.rs

@@ -25,6 +25,7 @@ use mount::Mount;
 use router::Router;
 use persistent::{Read, Write};
 use staticfile::Static;
+use multipart::server::iron::Intercept;
 
 use r2d2::Pool;
 use diesel::pg::PgConnection;
@@ -212,6 +213,7 @@ pub fn start(pool: Pool<ConnectionManager<PgConnection>>, storage: Storage) -> L
     chain.link_around(SessionManager);
     chain.link_before(PathNormalizer);
     chain.link_before(Logger);
+    chain.link_before(Intercept::default().file_size_limit((CONFIG.web.max_upload_filesize_mb * 1024 * 1024) as u64));
     chain.link(Read::<ConnectionPoolKey>::both(pool));
     chain.link(Read::<StorageKey>::both(storage));
     chain.link(Write::<SessionStoreKey>::both(HashMap::new()));

src/web/views/api/upload.rs

@@ -16,8 +16,9 @@
 use iron::{Request, Response, IronResult};
 use iron::status;
 use persistent::Read;
-use plugin::Pluggable;
-use params::{Params, Value};
+use multipart::server::Entries;
+
+use std::fs::File;
 
 use ::web::server::{ConnectionPoolKey, StorageKey};
 use ::web::backend::db::{PackageVersion, User};
@@ -26,7 +27,7 @@ use ::utils::error::BackendError;
 header! { (XNugetApiKey, "X-NuGet-ApiKey") => [String] }
 
 pub fn upload(req: &mut Request) -> IronResult<Response> {
-    let params = req.get_ref::<Params>().unwrap().clone();
+    let params = req.extensions.get::<Entries>().unwrap().clone();
 
     let apikey_raw = req.headers.get_raw("X-NuGet-ApiKey").expect("No Raw API Key");
     info!("Api Key: {:?}", apikey_raw);
@@ -44,9 +45,9 @@ pub fn upload(req: &mut Request) -> IronResult<Response> {
 
     match User::get_by_apikey(&*connection, &apikey) {
         Ok(user) => {
-            match params.find(&["package"]) {
-                Some(&Value::File(ref file)) => {
-                    match PackageVersion::new(&*connection, &user, storage, file.open().unwrap()) {
+            match params.files.get("package").and_then(|x| x.get(0)) {
+                Some(file) => {
+                    match PackageVersion::new(&*connection, &user, storage, File::open(&file.path).unwrap()) {
                         Ok(_) => Ok(Response::with(status::Ok)),
                         Err(BackendError::PermissionDenied) => Ok(Response::with((status::Forbidden, "Only the maintainer or admin is allowed to update a package"))),
                         Err(err) => {