Sandro Santilli
ffda103d61
Do not UNWATCH on every redis client release
...
Closes #161
2014-03-04 15:36:08 +01:00
Sandro Santilli
ecc9ea1226
Use 403 for forbidden, not 401
...
Includes upgrade of windshaft to 0.19.3
Includes upgrade of redis-mpool to 0.0.4
2014-03-04 15:32:31 +01:00
Sandro Santilli
93345a19b2
Do not log an error on GET /
...
Closes #177
2014-03-04 14:26:41 +01:00
Sandro Santilli
1741a20575
Do not cache map creation responses
...
Closes #176
CDB-1908 #resolve
CDB-1901 #resolve
Includes testcase
2014-03-04 10:46:15 +01:00
Sandro Santilli
30eb939dc7
Fix error message on missing requested signature
...
We don't really distinguish between missing or non-authorizing
signature. And that's fine. See #170
2014-03-03 18:14:17 +01:00
Sandro Santilli
40a254922a
Raise 403 forbidden on missing requested signature
...
Closes #170
Includes testcase
2014-03-03 18:06:39 +01:00
Sandro Santilli
7bc5bab432
Properly prefix statsd labels for all endpoints
...
CDB-1861 #resolve
Will be 100% complete with update of Windshaft to 0.19.3+
2014-03-03 16:24:20 +01:00
Sandro Santilli
bddc65a504
Forbid instanciating templates of foreign users
...
Closes #173
Includes testcase
2014-02-28 16:05:46 +01:00
Sandro Santilli
ddd2628c19
Fix database connection settings on template instanciation
...
Closes #174
Enhances testsuite to ensure test.js settings are read
2014-02-28 15:56:31 +01:00
Sandro Santilli
f46dc90035
Forbid using map signatures of foreign users
...
Closes #173
Includes testcase
2014-02-28 13:24:38 +01:00
Sandro Santilli
55f333c0b7
Call userByReq() only once in req2params
2014-02-27 16:40:59 +01:00
Sandro Santilli
f24e4f8a0a
Really skip CDB_TableMetadata lookup for sql affected by no tables
...
Closes #169
2014-02-27 15:34:09 +01:00
Sandro Santilli
36632c762e
Do not query CDB_TableMetadata for queries affected by no tables
...
Closes #16
2014-02-27 12:32:34 +01:00
Sandro Santilli
f284362988
Reduce sql-api communication timeout, and allow overriding it
...
Introduces new sqlapi.timeout directive, defaults to 100 ms
Includes testcase.
Closes #167
2014-02-27 10:33:32 +01:00
Sandro Santilli
a13c1f61af
Do not log an error for a legit request requiring no X-Cache-Channel
2014-02-24 17:34:00 +01:00
Sandro Santilli
5c466c51a8
Revert order of hostname components for statsd.prefix
2014-02-21 17:25:10 +01:00
Sandro Santilli
09ea924eb2
Allow using GET with sql-api for queries shorter than configured len
...
Introduces new sqlapi.max_get_sql_length directive, defaults to 2048.
Closes #155
Includes testcases.
2014-02-20 10:17:48 +01:00
Sandro Santilli
c8a042abdd
Expand "addCacheChannel" stats
2014-02-19 18:10:33 +01:00
Sandro Santilli
b4fc8ec4a5
Allow using ":host" as part of statsd.prefix
...
It'll be replaced with hostname.
Closes #153
2014-02-19 15:31:12 +01:00
Sandro Santilli
6c6f3d02f6
Always generate X-Cache-Channel for token-based tile responses
...
Closes #152
2014-02-19 10:09:54 +01:00
Sandro Santilli
36a135f02b
Refactor addCacheChannel using Step
2014-02-19 07:19:41 +01:00
Sandro Santilli
1c3734fde7
Make server_option a callable function, to reduce globals
...
Updates acceptance test for #152 to not mess wit internals
2014-02-19 06:45:29 +01:00
Sandro Santilli
3c09be64ce
Add pending test for X-Cache-Channel on tiler restart ( #152 )
2014-02-18 18:33:00 +01:00
Sandro Santilli
c14378ca5d
Avoid checking for table privacy when not using table maps
...
See #147
2014-02-17 18:20:18 +01:00
Sandro Santilli
26b9c8123d
Set maxSocket to allow more than 5 concurrent connections to sql-api
2014-02-17 18:03:11 +01:00
Sandro Santilli
1f2e4edd35
Comments cleanup
2014-02-17 11:10:08 +01:00
Sandro Santilli
212eec2ca6
Pass profiler back to windshaft on createLayergroup
2014-02-17 08:50:12 +01:00
Sandro Santilli
935826ed1a
Integrate statsd in template instanciation endpoint
...
NOTE: stats are only enabled using windshaft 0.18.2+
2014-02-15 08:23:43 +01:00
Sandro Santilli
8f3c6c3c87
Add profiler calls in template instanciation endpoint
2014-02-15 08:06:57 +01:00
Sandro Santilli
63401ca3df
Use a single redis client in SignedMap.isAuthorized
2014-02-14 17:07:52 +01:00
Sandro Santilli
def474c611
Skip getting geometry type if request has no table
2014-02-14 12:26:34 +01:00
Sandro Santilli
c1b2d16119
rename tablePrivacy_getUserDBName profile label
2014-02-14 11:47:43 +01:00
Sandro Santilli
678d653ee9
Allow configuring TTL of mapConfigs via "mapConfigTTL"
2014-02-13 15:44:54 +01:00
Sandro Santilli
4a6af108b4
Fix use of maxUserTemplate configuration variable
2014-02-13 15:01:58 +01:00
Sandro Santilli
e4cd37647e
Allow limiting number of allowed user templates
...
Adds maxUserTemplates directive.
Closes #136
2014-02-13 14:55:31 +01:00
Sandro Santilli
f7cef9dcd8
Fix bogus reference in SignedMaps when globals.environment is not set
2014-02-13 10:57:41 +01:00
Sandro Santilli
b673cb2a1f
Add more detailed profile info about the "authorize" step
...
Closes #142
2014-02-13 10:25:28 +01:00
Sandro Santilli
e88e49001a
Do not retrive user's api key if no api key was provided
...
Reduces redis interaction, see #142
2014-02-13 10:16:11 +01:00
Sandro Santilli
bf45bbea56
Do not send multiple equal commands to Varnish on connect
...
Closes #135
Also accept varnish "secret" in config
2014-02-12 16:14:27 +01:00
javi
01feeae6f4
include state configuration for windshaft fixes #139
2014-02-12 15:27:42 +01:00
Sandro Santilli
a948038ff4
Disable debug logging unless "debug" config param evaluates to true
...
Closes #137
2014-02-11 16:34:43 +01:00
Sandro Santilli
8c013ed2d1
Rename Step function in setDBConn
2014-02-11 13:42:44 +01:00
Sandro Santilli
7a749631e8
Fix profiler labels
2014-02-11 13:40:17 +01:00
Sandro Santilli
747f4803ba
Include hash of template in the maptoken returned from instanciation
...
Doing so basically removes the need to include the template identifier
in the surrogate keys of the responses for resources fetched via
the instance whenever template is updated. See #105
2014-02-10 15:30:35 +01:00
Sandro Santilli
399bed34ad
Do not try to replace template variables in undefined elements
...
See #133
2014-02-10 11:26:21 +01:00
Sandro Santilli
6b41fef96c
Fix sendError calls to receive the full Error instance
2014-02-10 11:11:35 +01:00
Sandro Santilli
fe6e915c0d
Always set database access parameters from req2params
...
Fixes privileged database access from unauthorized users while
fetching torque tiles or feature attributes (unreleased feature).
Closes #132 .
Includes testcase, which closes #119
2014-02-07 18:08:41 +01:00
javi
f5e0d06e2f
fixed when default value in a template attribute is a number and type = number checking fails fixed #130
2014-02-06 17:45:48 +01:00
javi
78f69d5236
template variables with spaces are not replaced correctly fixed #129
2014-02-06 17:33:26 +01:00
Sandro Santilli
b4936ffafa
Do not allow creating template with auth='token' and no valid tokens
...
Closes #128
Includes acceptance test for both creation and update
2014-02-06 12:24:14 +01:00