can't get project data (without authentication?)

reichlab / zoltr

http://reichlab.io/zoltr/

GNU General Public License v3.0

2 stars 4 forks source link

can't get project data (without authentication?) #23

Closed nickreich closed 3 years ago

nickreich commented 4 years ago

I didn't authenticate, but should still be able to get public info/data

> zoltar_connection <- new_connection()
> the_projects <- projects(zoltar_connection)
get_resource(): GET: https://zoltardata.com/api/projects/
Error in get_resource(zoltar_connection, url_for_projects(zoltar_connection)) : 
  Forbidden (HTTP 403).

nickreich commented 4 years ago

I guess now I am remembering that we did this to avoid bots hitting it...

matthewcornell commented 4 years ago

Yes, we decided that any API access requires an account. The docs say this too. Are you rethinking this?

nickreich commented 4 years ago

Is there some middle ground, to allow people to download public data without having the API be overloaded by bots?

matthewcornell commented 4 years ago

Maybe we are talking about two different things:

Authorization (who can view what). currently you must at least be authenticated (i.e., have an account)
Bandwidth (how much users are allowed).

The API library we use does seem to have support for throttling: https://www.django-rest-framework.org/api-guide/throttling/ . I've never dealt with this before.

mzorn-58 commented 3 years ago

Can this issue be closed?

matthewcornell commented 3 years ago

We'd need to work out the above issues before moving forward. Prioritization is up to @nickreich .

nickreich commented 3 years ago

I don't think there's a clear issue here. going to close it.