mmd-osm left a comment (openstreetmap/openstreetmap-website#6192)
I think we could skip the cookie altogether:
>From app/controllers/application_controller.rb -> update_totp -> generates new
>TOTP cookie today.
`ROTP::TOTP.new(Settings.totp_key, :interval => 3600).now` needs to be added to
app/controllers/export_controller.rb and passed as URL parameter to the
render.osm.org URL.
Render script needs to be enhanced to check new URL parameter next to the
cookie.
Thunderforest layers already work without showing signs of CORS issues,
although the request gets lots somewhere in turbo:before-fetch-response /
turbo:submit-end events. At one point it tries to parse the PNG image as HTML,
which fails then silently discards the image. I guess some additional event
handling would be needed here.
--
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/6192#issuecomment-3082634922
You are receiving this because you are subscribed to this thread.
Message ID:
<openstreetmap/openstreetmap-website/pull/6192/c3082634...@github.com>
_______________________________________________
rails-dev mailing list
rails-dev@openstreetmap.org
https://lists.openstreetmap.org/listinfo/rails-dev
