access_token query string on resource.get_legend.url causes legend image to not appear

[gubuntu]

From @senoadiw on January 26, 2017 11:4

• geonode_qgis_server version: 0.1.1
• GeoNode version: 2.5.10
• Python version:
• Operating System:

Description

On recent GeoNode versions, for logged in users the access_token query string is appended to the resource.get_legend.url in https://github.com/GeoNode/geonode/blob/47f2a42ff60be0c0c427b78df5e73a411ac2b2e1/geonode/layers/templates/layers/layer_detail.html#L430

For anonymous users the legend appears fine. Here is what it looks like as admin user:

Thanks

_Copied from original issue: kartoza/geonode_qgisserver#11

[gubuntu]

From @ismailsunni on January 27, 2017 3:31

Thanks @senoadiw for the report. Well, I haven't tested with the current version of geonode. It seems, they added new code that geoserver-specific. But it doesn't cover QGIS Server, unfortunatelly.

[gubuntu]

From @timlinux on January 29, 2017 21:7

@ismailsunni we should write a regex to strip off the access token before passing the request downstream to QGIS server?

[gubuntu]

From @ismailsunni on January 30, 2017 1:5

Hmm, after looked at the code again, the access token should be ignored since it's a GET parameter and the legend should have been shown.

@timlinux yes, that can work

[gubuntu]

This issue was moved to kartoza/geonode#189

[lucernae]

@gubuntu I think I already fixed this in this commit: https://github.com/kartoza/geonode/commit/b4048997c98e4ac18fc2bc060ac672382bc3a1aa#diff-fb405571ea0edfcf565594881ab9c7e9

What I did is put access_token regex on urls.py of qgis_server. So it will be parsed but ignored.

[gubuntu]

Ok, if you've tested it then go ahead and close