chore: fix latest build

backend/gestion/db/db_init.go

@@ -294,6 +294,11 @@ func InitDB() *Database {
 		log.Fatalf("❌ Erreur migration contacts: %v", err)
 	}
 
+	// Migration: clé RustFS pour les médias (stockage objet)
+	if _, err = database.Exec(`ALTER TABLE media ADD COLUMN IF NOT EXISTS key TEXT NOT NULL DEFAULT ''`); err != nil {
+		log.Fatalf("❌ Erreur migration media.key: %v", err)
+	}
+
 	// Lancer le nettoyage périodique des tokens expirés
 	go database.cleanExpiredTokensPeriodically()
 
@@ -399,6 +404,7 @@ func (db *Database) createTables() error {
 			product_id INTEGER NOT NULL REFERENCES products(id) ON DELETE CASCADE,
 			url TEXT NOT NULL,
 			type VARCHAR(50) NOT NULL,
+			key TEXT NOT NULL DEFAULT '',
 			created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
 		);`,
 

backend/gestion/db/db_media.go

@@ -59,8 +59,8 @@ func validateMediaURL(url string) error {
 	if strings.Contains(url, "..") || strings.Contains(url, "...") || strings.Contains(url, "..//") {
 		return fmt.Errorf("path traversal détecté dans l'URL")
 	}
-	if !strings.HasPrefix(url, "/uploads/") {
-		return fmt.Errorf("URL doit commencer par /uploads/")
+	if !strings.HasPrefix(url, "/uploads/") && !strings.HasPrefix(url, "/media/") {
+		return fmt.Errorf("URL doit commencer par /uploads/ ou /media/")
 	}
 	dangerousChars := []string{"<", ">", "\"", "'", ";", "|", "&", "$", "`", "\\"}
 	for _, char := range dangerousChars {
@@ -93,6 +93,11 @@ func (d *Database) CreateMedia(media any) error {
 	mediaType := m.GetType()
 	mediaURL := m.GetURL()
 
+	mediaKey := ""
+	if mediaPtr, isPtr := media.(*models.Media); isPtr {
+		mediaKey = mediaPtr.Key
+	}
+
 	if err := validateProductID(productID); err != nil {
 		log.Printf("❌ [CreateMedia] %v", err)
 		return err
@@ -106,14 +111,14 @@ func (d *Database) CreateMedia(media any) error {
 		return err
 	}
 
-	if err := d.InsertMedia(m, productID, mediaURL, mediaType); err != nil {
+	if err := d.InsertMedia(m, productID, mediaURL, mediaType, mediaKey); err != nil {
 		log.Printf("❌ [InsertMedia] %v", err)
 		return err
 	}
 	return nil
 }
 
-func (d *Database) InsertMedia(m any, productID int, mediaURL any, mediaType string) error {
+func (d *Database) InsertMedia(m any, productID int, mediaURL any, mediaType string, key string) error {
 	var exists bool
 	if err := d.GDB.Raw(`SELECT EXISTS(SELECT 1 FROM products WHERE id = ?)`, productID).Scan(&exists).Error; err != nil {
 		log.Printf("❌ [CreateMedia] Erreur vérification produit: %v", err)
@@ -128,9 +133,9 @@ func (d *Database) InsertMedia(m any, productID int, mediaURL any, mediaType str
 		ID int `gorm:"column:id"`
 	}
 	err := d.GDB.Raw(`
-		INSERT INTO media (product_id, url, type, created_at)
-		VALUES (?, ?, ?, ?) RETURNING id`,
-		productID, mediaURL, mediaType, time.Now(),
+		INSERT INTO media (product_id, url, type, key, created_at)
+		VALUES (?, ?, ?, ?, ?) RETURNING id`,
+		productID, mediaURL, mediaType, key, time.Now(),
 	).Scan(&result).Error
 	if err != nil {
 		log.Printf("❌ [CreateMedia] Erreur INSERT: %v", err)
@@ -154,7 +159,7 @@ func (d *Database) GetMediaByID(mediaID int) (*models.Media, error) {
 
 	var media models.Media
 	err := d.GDB.Raw(`
-		SELECT id, product_id, url, type, created_at
+		SELECT id, product_id, url, type, key, created_at
 		FROM media WHERE id = ?`, mediaID).Scan(&media).Error
 	if err != nil {
 		log.Printf("❌ [GetMediaByID] Erreur query: %v", err)
@@ -179,7 +184,7 @@ func (d *Database) GetMediaByProductID(productID int) ([]models.Media, error) {
 
 	var mediaList []models.Media
 	err := d.GDB.Raw(`
-		SELECT id, product_id, url, type, created_at
+		SELECT id, product_id, url, type, key, created_at
 		FROM media WHERE product_id = ?
 		ORDER BY id ASC`, productID).Scan(&mediaList).Error
 	if err != nil {