Download URL needs user to be logged in first

classic Classic list List threaded Threaded
4 messages Options
| Threaded
Open this post in threaded view
|

Download URL needs user to be logged in first

burdettn
Hi,
   galaxy provides a download_url to download zipped up files. However, the user must first log into Galaxy to commence the download. Is there a way to turn this feature off, so that users can click on the link and download the data without first login

Thanks
Neil

___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/
| Threaded
Open this post in threaded view
|

Re: Download URL needs user to be logged in first

John Chilton-4
I am not really sure what link you are referring to - can you tell me
how you found this link? "History -> Export to file" or is it via the
API?

Regardless, if you trust your users and want to disable security
mechanisms I believe (and I could be wrong) you should be able to by
finding the relevant controllers in Galaxy and changing either the
decorator to allow anonymous access or changing the checks on the
histories/datasets to disable checking if the supplied user is
authorized. Though this will make everyones data available to everyone
else (or the world if this is a publicly accessible Galaxy instance).

-John

On Wed, Jul 16, 2014 at 5:43 AM,  <[hidden email]> wrote:

> Hi,
>    galaxy provides a download_url to download zipped up files. However, the
> user must first log into Galaxy to commence the download. Is there a way to
> turn this feature off, so that users can click on the link and download the
> data without first login
>
> Thanks
> Neil
>
> ___________________________________________________________
> Please keep all replies on the list by using "reply all"
> in your mail client.  To manage your subscriptions to this
> and other Galaxy lists, please use the interface at:
>   http://lists.bx.psu.edu/
>
> To search Galaxy mailing lists use the unified search at:
>   http://galaxyproject.org/search/mailinglists/
___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/
| Threaded
Open this post in threaded view
|

Re: Download URL needs user to be logged in first

burdettn
Hi John,
           What I've implemented on our local system is the user uploads their data, then automatically a workflow is run on that data (so the user doesn't need to select a tool to execute). I email the user once the job is complete with a link to that the user can download the results. I auto get the download results using the api i.e:

~/scripts/api/display.py api_key http://barium-rbh/capaibl/api/histories/1cd8e2f6b131e891/contents/f68b550c4724eeae

This returns something like:

Member Information
------------------
accessible: True
file_name: /export/barium-data3/galaxy-suvr/database/files/000/dataset_421.dat
visible: True
file_size: 521
file_ext: html
id: f68b550c4724eeae
misc_info:
uuid: None
download_url: /capaibl/api/histories/1cd8e2f6b131e891/contents/f68b550c4724eeae/display
state: ok
display_types: []
display_apps: []
misc_blurb: 521 bytes
peek: <table cellspacing="0" cellpadding="3"><tr><td>HTML file</td></tr></table>
data_type: html
deleted: False
history_id: 4181f0f3af1244e2
genome_build: ?
hid: 120
visualizations: []
metadata_data_lines: 17
metadata_dbkey: ?
name: Processing input data (0171-T0-AV45)
model_class: HistoryDatasetAssociation
purged: False
api_type: file

>From this I get the "download_url" and add the server name to it and an extension to get:

http://barium-rbh/capaibl/api/histories/1cd8e2f6b131e891/contents/f68b550c4724eeae/display?to_ext=html

Which i add to the email. When the user clicks on it they are able to download the zipped up files. However, they can only do this after first login into Galaxy otherwise they get a "API Authentication Required for this request" error on the webpage.

Neil
________________________________________
From: John Chilton [[hidden email]]
Sent: Wednesday, July 16, 2014 10:46 PM
To: Burdett, Neil (DP&S, Herston - RBWH)
Cc: [hidden email]
Subject: Re: [galaxy-dev] Download URL needs user to be logged in first

I am not really sure what link you are referring to - can you tell me
how you found this link? "History -> Export to file" or is it via the
API?

Regardless, if you trust your users and want to disable security
mechanisms I believe (and I could be wrong) you should be able to by
finding the relevant controllers in Galaxy and changing either the
decorator to allow anonymous access or changing the checks on the
histories/datasets to disable checking if the supplied user is
authorized. Though this will make everyones data available to everyone
else (or the world if this is a publicly accessible Galaxy instance).

-John

On Wed, Jul 16, 2014 at 5:43 AM,  <[hidden email]> wrote:

> Hi,
>    galaxy provides a download_url to download zipped up files. However, the
> user must first log into Galaxy to commence the download. Is there a way to
> turn this feature off, so that users can click on the link and download the
> data without first login
>
> Thanks
> Neil
>
> ___________________________________________________________
> Please keep all replies on the list by using "reply all"
> in your mail client.  To manage your subscriptions to this
> and other Galaxy lists, please use the interface at:
>   http://lists.bx.psu.edu/
>
> To search Galaxy mailing lists use the unified search at:
>   http://galaxyproject.org/search/mailinglists/

___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/
| Threaded
Open this post in threaded view
|

Re: Download URL needs user to be logged in first

Kandalaft, Iyad
In reply to this post by John Chilton-4
You need to add the api key to the URL. E.g:
http://barium-rbh/capaibl/api/histories/1cd8e2f6b131e891/contents/f68b550c4724eeae/display?to_ext=html&key=APIKEYHERE 

Otherwise, Galaxy doesn't know who's trying to access the data and if they have authorization.

Regards,

Iyad Kandalaft
Bioinformatics Programmer
Microbial Biodiversity Bioinformatics
Science & Technology Branch
Agriculture & Agri-Food Canada
[hidden email] | (613) 759-1228

________________________________________
From: [hidden email] [[hidden email]] on behalf of John Chilton [[hidden email]]
Sent: July 16, 2014 8:46 AM
To: [hidden email]
Cc: [hidden email]
Subject: Re: [galaxy-dev] Download URL needs user to be logged in first

I am not really sure what link you are referring to - can you tell me
how you found this link? "History -> Export to file" or is it via the
API?

Regardless, if you trust your users and want to disable security
mechanisms I believe (and I could be wrong) you should be able to by
finding the relevant controllers in Galaxy and changing either the
decorator to allow anonymous access or changing the checks on the
histories/datasets to disable checking if the supplied user is
authorized. Though this will make everyones data available to everyone
else (or the world if this is a publicly accessible Galaxy instance).

-John

On Wed, Jul 16, 2014 at 5:43 AM,  <[hidden email]> wrote:

> Hi,
>    galaxy provides a download_url to download zipped up files. However, the
> user must first log into Galaxy to commence the download. Is there a way to
> turn this feature off, so that users can click on the link and download the
> data without first login
>
> Thanks
> Neil
>
> ___________________________________________________________
> Please keep all replies on the list by using "reply all"
> in your mail client.  To manage your subscriptions to this
> and other Galaxy lists, please use the interface at:
>   http://lists.bx.psu.edu/
>
> To search Galaxy mailing lists use the unified search at:
>   http://galaxyproject.org/search/mailinglists/
___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/

___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/