Get MapTiler API key - Githubissues

acteng / atip

Active Travel Infrastructure Platform

https://acteng.github.io/atip/

Apache License 2.0

22 stars 4 forks source link

Get MapTiler API key #59

Open dabreegster opened 1 year ago

dabreegster commented 1 year ago

Also, figure out how we're supposed to plumb it around. I can get the key out of Github just fine, but ultimately it winds up in the JS served to the user. Someone could trivially sniff the HTTP request in their browser or check the source. What's common practice here?

Robinlovelace commented 1 year ago

Not sure... Any ideas @acalcutt or others on the Maptiler team? Looking at https://github.com/maptiler/tileserver-gl

acalcutt commented 1 year ago

I'm only loosely affiliated with Maptiler because I requested access to update tileserver to maplibre and help the community move along some tileserver PRs.

I can't really speak on the API key since I use self-hosted mbtiles here. Typically I see the key specified on the source urls in the style, but they are viewable that way.

Are you trying to using the open source Tileserver-GL or the closed source Maptiler Server?

acalcutt commented 1 year ago

Maybe check out https://documentation.maptiler.com/hc/en-us/articles/360020806037-How-to-protect-your-map-key

dabreegster commented 1 year ago

We're using our own key now. Leaving this issue open to:

[ ] use a bit of config to deduplicate the two places in the code using the key
[ ] Follow that article and set up domain whitelisting for usage of the key (but still let local npm run dev work?)
[ ] Track the usage over a "typical" month and see how long we can manage on free tier