diff --git a/lib/cartodb/controllers/named_maps_admin.js b/lib/cartodb/controllers/named_maps_admin.js index 3c501ee1..296ecf52 100644 --- a/lib/cartodb/controllers/named_maps_admin.js +++ b/lib/cartodb/controllers/named_maps_admin.js @@ -4,11 +4,6 @@ const userMiddleware = require('../middleware/user'); const localsMiddleware = require('../middleware/context/locals'); const credentialsMiddleware = require('../middleware/context/credentials'); -const apikeyMiddleware = [ - localsMiddleware, - credentialsMiddleware(), -]; - /** * @param {AuthApi} authApi * @param {PgConnection} pgConnection @@ -29,7 +24,8 @@ NamedMapsAdminController.prototype.register = function (app) { `${base_url_templated}/`, cors(), userMiddleware, - apikeyMiddleware, + localsMiddleware, + credentialsMiddleware(), this.checkContentType('POST', 'POST TEMPLATE'), this.authorizedByAPIKey('create', 'POST TEMPLATE'), this.create() @@ -39,7 +35,8 @@ NamedMapsAdminController.prototype.register = function (app) { `${base_url_templated}/:template_id`, cors(), userMiddleware, - apikeyMiddleware, + localsMiddleware, + credentialsMiddleware(), this.checkContentType('PUT', 'PUT TEMPLATE'), this.authorizedByAPIKey('update', 'PUT TEMPLATE'), this.update() @@ -49,7 +46,8 @@ NamedMapsAdminController.prototype.register = function (app) { `${base_url_templated}/:template_id`, cors(), userMiddleware, - apikeyMiddleware, + localsMiddleware, + credentialsMiddleware(), this.authorizedByAPIKey('get', 'GET TEMPLATE'), this.retrieve() ); @@ -58,7 +56,8 @@ NamedMapsAdminController.prototype.register = function (app) { `${base_url_templated}/:template_id`, cors(), userMiddleware, - apikeyMiddleware, + localsMiddleware, + credentialsMiddleware(), this.authorizedByAPIKey('delete', 'DELETE TEMPLATE'), this.destroy() ); @@ -67,7 +66,8 @@ NamedMapsAdminController.prototype.register = function (app) { `${base_url_templated}/`, cors(), userMiddleware, - apikeyMiddleware, + localsMiddleware, + credentialsMiddleware(), this.authorizedByAPIKey('list', 'GET TEMPLATE LIST'), this.list() );