假设我们直接把用户照片保存在 Go 服务器的硬盘上，会发生什么？

OSS_REGION=cn-hangzhou
OSS_ENDPOINT=https://oss-cn-hangzhou.aliyuncs.com
OSS_BUCKET=album-course-dev

CREATE TABLE photos (
    id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT,
    album_id BIGINT UNSIGNED NOT NULL,
    bucket_name VARCHAR(100) NOT NULL,
    object_key VARCHAR(500) NOT NULL,
    original_name VARCHAR(255) NOT NULL,
    file_size BIGINT UNSIGNED NOT NULL,
    content_type VARCHAR(100) NOT NULL,
    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,

    UNIQUE KEY uk_photos_object_key(object_key),
    KEY idx_photos_album_created(album_id, created_at)
);

{
  "fileName": "beijing.jpg",
  "contentType": "image/jpeg",
  "fileSize": 2457600
}

{
  "code": "OK",
  "message": "success",
  "data": {
    "uploadId": "019acb25-xxxx",
    "objectKey": "users/1001/albums/2001/019acb25.jpg",
    "uploadUrl": "https://signed-upload-url...",
    "method": "PUT",
    "contentType": "image/jpeg",
    "expiresIn": 300
  }
}

objectKey := fmt.Sprintf(
    "users/%d/albums/%d/%s%s",
    currentUserID,
    albumID,
    uuid.NewString(),
    safeExtension,
)

async function uploadPhoto(file, albumId, token) {
  const authResponse = await fetch(
    `/api/albums/${albumId}/photos/upload-url`,
    {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Authorization: `Bearer ${token}`,
      },
      body: JSON.stringify({
        fileName: file.name,
        contentType: file.type,
        fileSize: file.size,
      }),
    },
  );

  const uploadInfo = (await authResponse.json()).data;

  await fetch(uploadInfo.uploadUrl, {
    method: "PUT",
    headers: { "Content-Type": uploadInfo.contentType },
    body: file,
  });

  return fetch(`/api/photo-uploads/${uploadInfo.uploadId}/complete`, {
    method: "POST",
    headers: { Authorization: `Bearer ${token}` },
  });
}

CREATE TABLE photo_uploads (
    id CHAR(36) PRIMARY KEY,
    user_id BIGINT UNSIGNED NOT NULL,
    album_id BIGINT UNSIGNED NOT NULL,
    object_key VARCHAR(500) NOT NULL,
    expected_size BIGINT UNSIGNED NOT NULL,
    content_type VARCHAR(100) NOT NULL,
    status TINYINT NOT NULL DEFAULT 0,
    expires_at DATETIME NOT NULL,
    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,

    UNIQUE KEY uk_photo_upload_object_key(object_key),
    KEY idx_photo_upload_status_expires(status, expires_at)
);

{
  "code": "OK",
  "message": "success",
  "data": {
    "url": "https://signed-view-url...",
    "expiresIn": 300
  }
}

result := db.
    Table("photos AS p").
    Joins("JOIN albums AS a ON a.id = p.album_id").
    Select("p.object_key").
    Where(`
        p.id = ?
        AND (
            a.visibility = ?
            OR a.user_id = ?
        )
    `, photoID, VisibilityPublic, currentUserID).
    First(&photo)