Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Second, simplyfied Download-Link without authentication #389

Open
wellemut opened this issue Jan 19, 2022 · 0 comments
Open

Second, simplyfied Download-Link without authentication #389

wellemut opened this issue Jan 19, 2022 · 0 comments
Assignees
Labels
0 API related to API functions 21 backend Issues for openfairdb.org 41 Pilots Relevant for our local and thematic partners, as powerusers of the map 42 Admins Issues needed for Admins and very close partners

Comments

@wellemut
Copy link
Member

wellemut commented Jan 19, 2022

We have a nicely working download for registered Pilots, which we need and use for map creation https://blog.vonmorgen.org/export-import/ (The existing system should remain, this is an additional feature without authentication)

Problem

Registering on Kartevonmorgen.org is not very simple. (you have to confirm your mailadress and basically subscribe to an area and then waiting to get granted as Scout-Role)
But Having a static list-view of entries is often helpful

  • to know, how many entries where mapped (could be solved by this too Count of entries in a specific bbox #313)
  • to check, if all of them are correct and in place...
    Checking entries on the map is rather annoying because with each map-movement, the left result bar gets re-rendered and the sorting logic changes.

Solution

Frontend

Backend

  • Therefore it is needed to have a Download avaliable without registration.
  • To protect the content of misuse, the fields of contact_email, contact_phone and created_by needs to be blank OR filled by "This is not allowed without auth" if there would be an email-adress or a phone-number.
    • The rest of the data is not sensitive and can be just provided.
  • The license of the downloaded data should always be "CC BY-SA 4.0 or ODbL" (user can choose, what they prefer) instead of CC0-1.0.
  • To protect our server, you should include a protection of brute-force attacs by downloading too often.
    • I think 1 download per minut per IP should be sufficient.
    • Or a limit of 10 downloads per day per IP is also fine
    • And this download-function could be build that it stops running as soon as our server gets too much traffic.

Similar Issues:

#235
#303

@wellemut wellemut added 21 backend Issues for openfairdb.org 41 Pilots Relevant for our local and thematic partners, as powerusers of the map 42 Admins Issues needed for Admins and very close partners 0 API related to API functions labels Jan 19, 2022
@wellemut wellemut changed the title Simplyfied Download without authentication Second, simplyfied Download-Link without authentication Jan 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
0 API related to API functions 21 backend Issues for openfairdb.org 41 Pilots Relevant for our local and thematic partners, as powerusers of the map 42 Admins Issues needed for Admins and very close partners
Projects
None yet
Development

No branches or pull requests

3 participants