fixed #91

lib/cartodb/server_options.js

@@ -424,6 +424,9 @@ module.exports = function(){
         // bring all query values onto req.params object
         _.extend(req.params, req.query);
 
+        // use both api_key and map_key to auth
+        req.params.map_key = req.params.map_key || req.params.api_key;
+
         // for cartodb, ensure interactivity is cartodb_id or user specified
         req.params.interactivity = req.params.interactivity || 'cartodb_id';
 

test/unit/cartodb/req2params.test.js

@@ -77,6 +77,7 @@ suite('req2params', function() {
           assert.equal(qo.cache_buster, query.cache_buster)
           assert.equal('test', query.api_key)
           assert.equal(undefined, query.non_included)
+          assert.equal(query.map_key, 'test')
           done();
         });
       });