fix(website): allow unauthenticated users to view datasets (#1263)

loculus-project · Mar 8, 2024 · fcdf8aa · fcdf8aa
1 parent 4d6e36f
commit fcdf8aa
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 8 deletions.
diff --git a/backend/src/main/kotlin/org/loculus/backend/config/SecurityConfig.kt b/backend/src/main/kotlin/org/loculus/backend/config/SecurityConfig.kt
@@ -50,6 +50,9 @@ class SecurityConfig {
 
     private val getEndpointsThatArePublic = arrayOf(
         "/data-use-terms/*",
+        "/get-dataset",
+        "/get-dataset-records",
+        "get-dataset-cited-by-publication",
     )
 
     @Bean

diff --git a/website/src/pages/datasets/[datasetId].astro b/website/src/pages/datasets/[datasetId].astro
@@ -7,7 +7,6 @@ import { getRuntimeConfig } from '../../config';
 import BaseLayout from '../../layouts/BaseLayout.astro';
 import { DatasetCitationClient } from '../../services/datasetCitationClient.ts';
 import type { Dataset } from '../../types/datasetCitation';
-import { createAuthorizationHeader } from '../../utils/createAuthorizationHeader.ts';
 import { getAccessToken } from '../../utils/getAccessToken';
 
 const clientConfig = getRuntimeConfig().public;
@@ -20,17 +19,14 @@ const datasetClient = DatasetCitationClient.create();
 
 const datasetResponse = (await datasetClient.call('getDataset', {
     params: { datasetId, version },
-    headers: createAuthorizationHeader(accessToken),
 })) as any;
 
 const datasetRecordsResponse = (await datasetClient.call('getDatasetRecords', {
     params: { datasetId, version },
-    headers: createAuthorizationHeader(accessToken),
 })) as any;
 
 const datasetCitedByResponse = (await datasetClient.call('getDatasetCitedBy', {
     params: { datasetId, version },
-    headers: createAuthorizationHeader(accessToken),
 })) as any;
 
 const getDatasetByVersion = (datasetVersions: Dataset[], version: string) => {

diff --git a/website/src/services/datasetCitationApi.ts b/website/src/services/datasetCitationApi.ts
@@ -26,7 +26,6 @@ const getDatasetCitedByEndpoint = makeEndpoint({
     method: 'get',
     path: '/get-dataset-cited-by-publication?datasetId=:datasetId&version=:version',
     alias: 'getDatasetCitedBy',
-    parameters: [authorizationHeader],
     response: citedByResult,
     errors: [notAuthorizedError],
 });
@@ -35,7 +34,6 @@ const getDatasetEndpoint = makeEndpoint({
     method: 'get',
     path: '/get-dataset?datasetId=:datasetId&version=:version',
     alias: 'getDataset',
-    parameters: [authorizationHeader],
     response: datasets,
     errors: [notAuthorizedError],
 });
@@ -44,7 +42,6 @@ const getDatasetRecordsEndpoint = makeEndpoint({
     method: 'get',
     path: '/get-dataset-records?datasetId=:datasetId&version=:version',
     alias: 'getDatasetRecords',
-    parameters: [authorizationHeader],
     response: datasetRecords,
     errors: [notAuthorizedError],
 });

diff --git a/website/src/utils/shouldMiddlewareEnforceLogin.ts b/website/src/utils/shouldMiddlewareEnforceLogin.ts
@@ -10,7 +10,7 @@ function getEnforcedLoginRoutes(configuredOrganisms: string[]) {
 
         enforcedLoginRoutesCache[cacheKey] = [
             new RegExp('^/user/?'),
-            new RegExp(`^/datasets/?`),
+            new RegExp(`^/datasets\/?$`),
             ...organismSpecificRoutes,
         ];
     }