mapbox / datasets-api-gateway Goto Github PK

All of the configuration is now external, but is in history. To make this public, we'll all need to cycle any api keys that belonged to any of us.

Could the authenticated read/write functionality that is shaping up as middleware in index.js be abstracted away from express? If so, this library could feasibly give you two options:

• a pre-baked express app to run on your servers
• a cloudformation template (api-gateway and lambda functions) someone could launch in their own AWS account

cc @tmcw

Hiding the access token is a great first step, but you can still modify everything in a dataset. In order to be used for a read/write demo, we'll need more restrictions.

I'm working on adding Auth0 to the GeoSheet application, which will let us include jwt tokens in requests. Then we can use those tokens to only let users edit their own stuff.

we need tests for the following request types:

• Retrieve a dataset
• Update a dataset
• List features
• Insert or update a feature
• Retrieve a feature
• Delete a feature

cc @danswick