Sandro Santilli
8f3c6c3c87
Add profiler calls in template instanciation endpoint
2014-02-15 08:06:57 +01:00
Sandro Santilli
63401ca3df
Use a single redis client in SignedMap.isAuthorized
2014-02-14 17:07:52 +01:00
Sandro Santilli
def474c611
Skip getting geometry type if request has no table
2014-02-14 12:26:34 +01:00
Sandro Santilli
c1b2d16119
rename tablePrivacy_getUserDBName profile label
2014-02-14 11:47:43 +01:00
Sandro Santilli
678d653ee9
Allow configuring TTL of mapConfigs via "mapConfigTTL"
2014-02-13 15:44:54 +01:00
Sandro Santilli
4a6af108b4
Fix use of maxUserTemplate configuration variable
2014-02-13 15:01:58 +01:00
Sandro Santilli
e4cd37647e
Allow limiting number of allowed user templates
...
Adds maxUserTemplates directive.
Closes #136
2014-02-13 14:55:31 +01:00
Sandro Santilli
f7cef9dcd8
Fix bogus reference in SignedMaps when globals.environment is not set
2014-02-13 10:57:41 +01:00
Sandro Santilli
b673cb2a1f
Add more detailed profile info about the "authorize" step
...
Closes #142
2014-02-13 10:25:28 +01:00
Sandro Santilli
e88e49001a
Do not retrive user's api key if no api key was provided
...
Reduces redis interaction, see #142
2014-02-13 10:16:11 +01:00
Sandro Santilli
bf45bbea56
Do not send multiple equal commands to Varnish on connect
...
Closes #135
Also accept varnish "secret" in config
2014-02-12 16:14:27 +01:00
javi
01feeae6f4
include state configuration for windshaft fixes #139
2014-02-12 15:27:42 +01:00
Sandro Santilli
a948038ff4
Disable debug logging unless "debug" config param evaluates to true
...
Closes #137
2014-02-11 16:34:43 +01:00
Sandro Santilli
8c013ed2d1
Rename Step function in setDBConn
2014-02-11 13:42:44 +01:00
Sandro Santilli
7a749631e8
Fix profiler labels
2014-02-11 13:40:17 +01:00
Sandro Santilli
747f4803ba
Include hash of template in the maptoken returned from instanciation
...
Doing so basically removes the need to include the template identifier
in the surrogate keys of the responses for resources fetched via
the instance whenever template is updated. See #105
2014-02-10 15:30:35 +01:00
Sandro Santilli
399bed34ad
Do not try to replace template variables in undefined elements
...
See #133
2014-02-10 11:26:21 +01:00
Sandro Santilli
6b41fef96c
Fix sendError calls to receive the full Error instance
2014-02-10 11:11:35 +01:00
Sandro Santilli
fe6e915c0d
Always set database access parameters from req2params
...
Fixes privileged database access from unauthorized users while
fetching torque tiles or feature attributes (unreleased feature).
Closes #132 .
Includes testcase, which closes #119
2014-02-07 18:08:41 +01:00
javi
f5e0d06e2f
fixed when default value in a template attribute is a number and type = number checking fails fixed #130
2014-02-06 17:45:48 +01:00
javi
78f69d5236
template variables with spaces are not replaced correctly fixed #129
2014-02-06 17:33:26 +01:00
Sandro Santilli
b4936ffafa
Do not allow creating template with auth='token' and no valid tokens
...
Closes #128
Includes acceptance test for both creation and update
2014-02-06 12:24:14 +01:00
Sandro Santilli
752e9ec655
Add checkInvalidCertificate method for SignedMap class
...
Includes unit test
2014-02-06 12:05:01 +01:00
Sandro Santilli
9018e39762
Make endpoints configurable
...
Closes #127
Uses /api/v1/maps* in the production and staging example configs,
keeps /maps* for development and test (they are examples...)
2014-02-05 15:14:47 +01:00
Sandro Santilli
a964ed5fe6
Implement Unified Map API
...
Closes #126
2014-02-04 19:04:59 +01:00
Sandro Santilli
b862904506
Be explicit about the map output srid configuration
2014-02-04 16:26:26 +01:00
javi
7197cc2d62
added stack to response in development mode
2014-02-04 14:58:21 +01:00
Sandro Santilli
978ea9cd04
Fix sqlapi request header to be "Host", not "Hostname"
...
Closes (better) #117 -- automated test included
2014-01-30 16:46:26 +01:00
Sandro Santilli
ca4f3d2025
Re-introduce sqlapi.host directive, allowing DNS lookups drop
...
For backward compatibility, sqlapi.host is only used if domain
is also defined and has a different value (empty string allowed).
Closes #117
2014-01-30 16:12:37 +01:00
Sandro Santilli
1f0faba71c
Stop processing XML on renderer creation
...
Not needed anymore since 1.6.1 introduced on-demand XML generation.
2014-01-30 11:14:52 +01:00
Sandro Santilli
d32278b227
Rename template instanciation function
2014-01-29 14:30:27 +01:00
javi
ad0b2ffc8e
added support for template instanciation with jsonp closes #116
2014-01-29 13:11:37 +01:00
Sandro Santilli
67e4e7e99b
Set api_key to signer's when instanciating a template map
...
Closes #114
2014-01-28 12:37:41 +01:00
javi
92ca447c06
fixed #91
2014-01-28 12:05:01 +01:00
javi
e4e08db0b4
Merge branch 'master' of github.com:Vizzuality/Windshaft-cartodb
2014-01-22 19:10:37 +01:00
javi
164d952e56
support CORS in template instanciation endpoint, fixes #113
2014-01-22 19:10:09 +01:00
Sandro Santilli
5772c81590
Fix support for long (>64k chars) queries in layergroup creation
...
Closes #111 . Includes testcase.
2014-01-16 17:20:30 +01:00
Sandro Santilli
f89fd98ed7
Expect malformed response objects ( #109 )
...
Include test for sql errors on layergroup creation
Closes #109
2014-01-15 11:53:19 +01:00
Sandro Santilli
d6fe5339cf
Do not choke on headers cleanup when response headers are not set
...
Raise a WARNING instead.
See #107 (github) and CDB-1438 (JIRA)
2014-01-13 18:56:09 +01:00
Sandro Santilli
2690ef3f05
Drop cache headers from error responses.
...
Closes #107 (github), #resolve CDB-1423 (JIRA)
2014-01-13 11:20:02 +01:00
Sandro Santilli
4ee4492490
Yet another username extraction fix. Thanks again @demimismo.
...
Closes #100 (yet again)
2014-01-09 16:46:47 +01:00
Sandro Santilli
fcd17692ee
Fix username extraction in another two places. Thanks @demimismo.
...
Closes #100 (again)
2014-01-09 15:36:16 +01:00
Sandro Santilli
ef3733aebe
Improve error on attempt to delete missing template
2013-12-20 12:54:38 +01:00
Sandro Santilli
c7465479a2
Improve error on a signature certificate with no or broken auth
2013-12-20 10:41:27 +01:00
Sandro Santilli
50a902a90b
Fix english of error message for sql-api connection problems
2013-12-18 12:59:26 +01:00
Sandro Santilli
0f90d687c7
Implement signed teplate maps
...
Closes #98
Raises minimum required redis version to 2.4.0+ (Debian stable has 2.4.14)
2013-12-17 17:39:21 +01:00
Sandro Santilli
84b7d78ea4
Add an utility authorizedByAPIKey method for reuse
2013-12-17 17:17:17 +01:00
Sandro Santilli
73a065c1cc
Make sure user from domain is always computed locally
...
Involved upgrade of cartodb-redis to 0.3.0
Really closes #100
2013-12-17 17:17:17 +01:00
Sandro Santilli
1f693c6c78
Add 'user_from_host' directive to generalize username extraction
...
Closes #100
Default extractor is backward compatible
2013-12-17 17:17:17 +01:00
Sandro Santilli
e9db535dd8
Drop the idea that we can distinguish a "dbowner" from the domain
...
We only recognize "users"
2013-12-17 17:17:17 +01:00