Restrict authenticatedRules (#1982)

giohappy · web-flow · commit 582881d94fa5 · 2025-03-11T18:09:28.000+01:00
diff --git a/geonode_mapstore_client/templates/geonode-mapstore-client/_geonode_config.html b/geonode_mapstore_client/templates/geonode-mapstore-client/_geonode_config.html
@@ -162,17 +162,17 @@
                 useAuthenticationRules: true,
                 authenticationRules: [
                     {
-                        urlPattern: '.*geoserver.*',
+                        urlPattern: geoServerPublicLocation + '.*',
                         authkeyParamName: 'access_token',
                         method: 'authkey'
                     },
                     {
-                        urlPattern: '.*gs.*',
+                        urlPattern: siteUrl + 'gs.*',
                         authkeyParamName: 'access_token',
                         method: 'authkey'
                     },
                     {
-                        urlPattern: '.*api/v2.*',
+                        urlPattern: siteUrl + 'api/v2.*',
                         method: 'bearer'
                     }
                 ],

Original file line number	Diff line number	Diff line change
`@@ -162,17 +162,17 @@`
`162`	`162`	`useAuthenticationRules: true,`
`163`	`163`	`authenticationRules: [`
`164`	`164`	`{`
`165`		`- urlPattern: '.geoserver.',`
	`165`	`+ urlPattern: geoServerPublicLocation + '.*',`
`166`	`166`	`authkeyParamName: 'access_token',`
`167`	`167`	`method: 'authkey'`
`168`	`168`	`},`
`169`	`169`	`{`
`170`		`- urlPattern: '.gs.',`
	`170`	`+ urlPattern: siteUrl + 'gs.*',`
`171`	`171`	`authkeyParamName: 'access_token',`
`172`	`172`	`method: 'authkey'`
`173`	`173`	`},`
`174`	`174`	`{`
`175`		`- urlPattern: '.api/v2.',`
	`175`	`+ urlPattern: siteUrl + 'api/v2.*',`
`176`	`176`	`method: 'bearer'`
`177`	`177`	`}`
`178`	`178`	`],`