Sandro Santilli
399bed34ad
Do not try to replace template variables in undefined elements
...
See #133
2014-02-10 11:26:21 +01:00
Sandro Santilli
6b41fef96c
Fix sendError calls to receive the full Error instance
2014-02-10 11:11:35 +01:00
Sandro Santilli
fe6e915c0d
Always set database access parameters from req2params
...
Fixes privileged database access from unauthorized users while
fetching torque tiles or feature attributes (unreleased feature).
Closes #132 .
Includes testcase, which closes #119
2014-02-07 18:08:41 +01:00
javi
f5e0d06e2f
fixed when default value in a template attribute is a number and type = number checking fails fixed #130
2014-02-06 17:45:48 +01:00
javi
78f69d5236
template variables with spaces are not replaced correctly fixed #129
2014-02-06 17:33:26 +01:00
Sandro Santilli
b4936ffafa
Do not allow creating template with auth='token' and no valid tokens
...
Closes #128
Includes acceptance test for both creation and update
2014-02-06 12:24:14 +01:00
Sandro Santilli
752e9ec655
Add checkInvalidCertificate method for SignedMap class
...
Includes unit test
2014-02-06 12:05:01 +01:00
Sandro Santilli
9018e39762
Make endpoints configurable
...
Closes #127
Uses /api/v1/maps* in the production and staging example configs,
keeps /maps* for development and test (they are examples...)
2014-02-05 15:14:47 +01:00
Sandro Santilli
a964ed5fe6
Implement Unified Map API
...
Closes #126
2014-02-04 19:04:59 +01:00
Sandro Santilli
b862904506
Be explicit about the map output srid configuration
2014-02-04 16:26:26 +01:00
javi
7197cc2d62
added stack to response in development mode
2014-02-04 14:58:21 +01:00
Sandro Santilli
978ea9cd04
Fix sqlapi request header to be "Host", not "Hostname"
...
Closes (better) #117 -- automated test included
2014-01-30 16:46:26 +01:00
Sandro Santilli
ca4f3d2025
Re-introduce sqlapi.host directive, allowing DNS lookups drop
...
For backward compatibility, sqlapi.host is only used if domain
is also defined and has a different value (empty string allowed).
Closes #117
2014-01-30 16:12:37 +01:00
Sandro Santilli
1f0faba71c
Stop processing XML on renderer creation
...
Not needed anymore since 1.6.1 introduced on-demand XML generation.
2014-01-30 11:14:52 +01:00
Sandro Santilli
d32278b227
Rename template instanciation function
2014-01-29 14:30:27 +01:00
javi
ad0b2ffc8e
added support for template instanciation with jsonp closes #116
2014-01-29 13:11:37 +01:00
Sandro Santilli
67e4e7e99b
Set api_key to signer's when instanciating a template map
...
Closes #114
2014-01-28 12:37:41 +01:00
javi
92ca447c06
fixed #91
2014-01-28 12:05:01 +01:00
javi
e4e08db0b4
Merge branch 'master' of github.com:Vizzuality/Windshaft-cartodb
2014-01-22 19:10:37 +01:00
javi
164d952e56
support CORS in template instanciation endpoint, fixes #113
2014-01-22 19:10:09 +01:00
Sandro Santilli
5772c81590
Fix support for long (>64k chars) queries in layergroup creation
...
Closes #111 . Includes testcase.
2014-01-16 17:20:30 +01:00
Sandro Santilli
f89fd98ed7
Expect malformed response objects ( #109 )
...
Include test for sql errors on layergroup creation
Closes #109
2014-01-15 11:53:19 +01:00
Sandro Santilli
d6fe5339cf
Do not choke on headers cleanup when response headers are not set
...
Raise a WARNING instead.
See #107 (github) and CDB-1438 (JIRA)
2014-01-13 18:56:09 +01:00
Sandro Santilli
2690ef3f05
Drop cache headers from error responses.
...
Closes #107 (github), #resolve CDB-1423 (JIRA)
2014-01-13 11:20:02 +01:00
Sandro Santilli
4ee4492490
Yet another username extraction fix. Thanks again @demimismo.
...
Closes #100 (yet again)
2014-01-09 16:46:47 +01:00
Sandro Santilli
fcd17692ee
Fix username extraction in another two places. Thanks @demimismo.
...
Closes #100 (again)
2014-01-09 15:36:16 +01:00
Sandro Santilli
ef3733aebe
Improve error on attempt to delete missing template
2013-12-20 12:54:38 +01:00
Sandro Santilli
c7465479a2
Improve error on a signature certificate with no or broken auth
2013-12-20 10:41:27 +01:00
Sandro Santilli
50a902a90b
Fix english of error message for sql-api connection problems
2013-12-18 12:59:26 +01:00
Sandro Santilli
0f90d687c7
Implement signed teplate maps
...
Closes #98
Raises minimum required redis version to 2.4.0+ (Debian stable has 2.4.14)
2013-12-17 17:39:21 +01:00
Sandro Santilli
84b7d78ea4
Add an utility authorizedByAPIKey method for reuse
2013-12-17 17:17:17 +01:00
Sandro Santilli
73a065c1cc
Make sure user from domain is always computed locally
...
Involved upgrade of cartodb-redis to 0.3.0
Really closes #100
2013-12-17 17:17:17 +01:00
Sandro Santilli
1f693c6c78
Add 'user_from_host' directive to generalize username extraction
...
Closes #100
Default extractor is backward compatible
2013-12-17 17:17:17 +01:00
Sandro Santilli
e9db535dd8
Drop the idea that we can distinguish a "dbowner" from the domain
...
We only recognize "users"
2013-12-17 17:17:17 +01:00
Sandro Santilli
7b7408dab7
Revert "Drop /map_metadata API entry point"
...
This reverts commit b37b07a06a1dd3cf05d60f4aa613ab5c48b90700.
This was too light of a decision...
2013-12-17 17:17:17 +01:00
Sandro Santilli
9c897a91a9
Drop /map_metadata API entry point
...
Closes #101
2013-12-17 17:17:17 +01:00
Sandro Santilli
38342a7f5f
Refactor req2params to make setting db credential easier
2013-12-17 17:17:16 +01:00
Sandro Santilli
276422f4be
Set grainstore's GC run probability, for documentation purpose
...
It sets it to the current grainstore default, so nothing changes.
2013-12-17 17:17:16 +01:00
Sandro Santilli
385022de80
Revert "fixed #91 " -- the fix was for an unconfirmed bug
...
This reverts commit 9155724082 .
See #38 for further action
2013-12-17 17:17:16 +01:00
javi
a378fc4e68
fixed #91
2013-12-17 17:17:16 +01:00
javi
01de288c35
fixed #96
2013-12-17 17:17:15 +01:00
Sandro Santilli
cc09a8b66f
Update to cartodb-redis 0.1.0
2013-12-17 17:17:15 +01:00
Sandro Santilli
a60a3adc12
CartoDB redis interaction delegated to "cartodb-redis" module
2013-12-17 17:17:14 +01:00
Sandro Santilli
baa95a62d1
Add support for reading user-specific database_password from redis
...
This commits adds support for CartoDB-2.5.0 model.
Closes #89 .
Change is backward compatible.
2013-12-17 17:17:14 +01:00
Sandro Santilli
12f0826d32
Do not force ending dot in SQL-API hostname, for easier testing
2013-12-17 17:17:14 +01:00
Sandro Santilli
07cb36ebc7
Read user's database_host from redis, when available ( #88 )
...
Still lacks a testcase
2013-12-17 17:17:14 +01:00
Sandro Santilli
d7c82e7a51
Indent fixes
2013-12-17 17:17:14 +01:00
Sandro Santilli
bf340e684a
Tweak error messages on missing redis variables, update tests
2013-12-17 17:17:14 +01:00
Luis Bosque
8d1b394df1
Add function to read database host from redis
2013-12-17 17:17:14 +01:00
Sandro Santilli
eb51d18012
Add support for specifying database connection passwords
2013-12-17 17:17:13 +01:00