search

IQSS / dataverse-frontend

An upcoming and modernized UI for Dataverse
Apache License 2.0
19 stars 16 forks source link

Update getFileThumbnailById implementation to use authentication #195

Open MellyGray opened 1 year ago

MellyGray commented 1 year ago

Overview of the Feature Request

We need to update the implementation of the getFileThumbnailById method of the FileJSDataverseRepository to incorporate authentication. This update is necessary once the Data Access API is enhanced to support new authentication methods (currently it is using cookie authentication)

What kind of user is the feature intended for?

All of them

What inspired the request?

The inspiration behind this feature request is to enhance security and access control for the getFileThumbnailById functionality. With the introduction of new authentication methods in the Access Data API, it is essential to align the getFileThumbnails implementation accordingly to ensure secure access to file thumbnails.

What existing behavior do you want changed?

Currently, the getFileThumbnails function does not utilize authentication when retrieving file thumbnails. The Access Data API is using the cookie authentication by default, but this would be removed in the future, so in that moment we'll need to update the SPA implementation.

Any brand new behavior do you want to add to Dataverse?

Modify the getFileThumbnails implementation to incorporate authentication based on the updated Access Data API.

With this feature, the getFileThumbnails function will use the latest authentication methods provided by the Access Data API to ensure that only authorized users can access file thumbnails.

Any open or closed issues related to this feature request?

qqmyers commented 1 year ago

FYI: #9669 makes several changes w.r.t. thumbnails.