Custom map not view in shared Dashboards

[chenlingmin]

Hello

I added custom Map, It's worked.
But not work in my shared Dashboard.

I found GET api/geojson/a5bc9fba-6bc6-4bbf-6304-87b9ad5d5493 api unauthenticated

[tewald]

It's a permission issue.
The /geojson route is auth protected.
I've made it work by cloning the repository and changing the line:
(context "/geojson" [] (+auth geojson/routes))
to
(context "/geojson" [] geojson/routes)
on the metabase/api/routes.clj file.

[salsakran]

Hmm. Are there any security implications to allowing custom geojson files to be downloaded from an instance without authing? Obviously, if you're using them in a public dashboard, you need to be able to get to them without authenticating, but we should probably only allow GETs and not other HTTP verbs.

[flamber]

This issue is most likely a duplicate of #5338, despite referencing embedded, since both issues are failing to get the map from the same end point /api/geojson/:UUID

[MarcGJA]

Metabase v0.31.2
AWS EBS
JWT embedding w/maps

So how can I go about implementing @tewald's solution on a working EBS Metabase instance?

The thought of editing clj code, learning how to use Docker (I haven't a clue), plus dealing with AWS's eccentricities (sans MySQL option #9021) is somewhat intimidating but I'm going to have to do something soon.

Embed custom geojson maps (totally under my control, I designed them from scratch) are a must-have even with "to-do" list items like binning miss-categorizations (#7486, #9208), floating maps with peek-a-boo labels (#7638), and single-color shading (#9682).

Something is better than nothing which is what we've got right now (#5338, #9193 closed as dup).

[camsaul]

Duplicate of #5338