authConfig with external catalog

[jlev]

Hi, I'm trying to configure STAC Browser with two catalogURLs, both of which require auth as a query parameter.

If I set catalogUrl and authConfig, it will connect and render correctly, but if I then go to /external/ and try to load a second catalog which also requires auth, it doesn't appear that the required parameter is being set.

Is there a way to force this? I could also potentially unset the catalogURL and then override the STACIndex listing, and let users pick from that on startup.

[jlev]

I was able to add a second form-group in SelectDataSource.vue to preload just our internal catalogs. If this is a feature that others would like I can make a PR to inject this from the config.

[m-mohr]

If I set catalogUrl and authConfig, it will connect and render correctly, but if I then go to /external/ and try to load a second catalog which also requires auth, it doesn't appear that the required parameter is being set.

This is intentional for security reasons. Otherwise, credentials/tokens may be leaked to externals.

Is there a way to force this? I could also potentially unset the catalogURL and then override the STACIndex listing, and let users pick from that on startup.

No, currently you'd need to deploy STAC Browser twice. STAC Browser is optimized to work for a single catalog url (e.g., generates cleaner-URLs, page refresh works better, authentication, ...). Of course there are ways to change the code for your case, but then you may run into conflicts or issues in the future. The SelectDataSource was meant for demo purposes and in the end all pages are implicitly external, which doesn't lead to the best STAC Browser experience.

Maybe the best way forward is to allow configuring a pattern for allowed paths for authConfig?

[m-mohr]

Actually, there's already an option in the config for this: allowedDomains. If you allow the domains of both catalogs, does this solve the issue for you? In the latest version available from the main branch, it should now apply to headers and query parameters. @jlev
Please, let me know whether it works for you. If not, I can re-open here.

[jlev]

Thanks @m-mohr, I just got the chance to test this with 3.01 and it works. Both of my catalogs are on the same domain, so one setting in allowedDomains does the trick.