Openstreetmap-website: Can't see my route images from other site

Created on 19 May 2018 · 7Comments · Source: openstreetmap/openstreetmap-website

Hi,

I'm interested in presenting the user routes and allow a user to upload routes to OSM from a different UI than openstreetmap.
I'm using osm-oauth and basically most of the functionality is working, except that when I want to present a trace picture I get a 403 error message.
Here's an image link I would like to be able see after I login to my account:
https://www.openstreetmap.org/user/Harel%20M/traces/2660108/picture
My OSM alternative UI can be found here:
https://israelhiking.osm.org.il/
Login on the top right site.
Then click on the user to open a dialog with shares (non OSM related) and uploaded traces.
The second tab has the uploaded files, opening the console shows the following errors:

I think it used to work in the past. I'm guessing it's probably related to security, but it would be very nice to be able to see these pictures.

Source

HarelM

All 7 comments

Those traces are private so they're only visible to you when you're logged in - if you don't have a valid OSM session cookie, or your browser doesn't send it for a third party image load, then you won't be able to see them.

OAuth is not relevant because that's not API so not controlled by OAuth.

tomhughes on 19 May 2018

Can you direct me to a manual or to the code that creates those session cookies?

HarelM on 19 May 2018

As a side note @tomhughes, your behavior of "close-first-ask-questions-later" is very unfriendly and causes antagonism. If you want people to contribute to this project this is not the right approach. I suggest to ask if the person who opened the issue is satisfied with the answer and can close the issue himself, and only if there's no response within a given time limit then close it.

HarelM on 19 May 2018

👎2

They're created when you login on the web site - they're not API that you're expected to use from a third party site, just as those images are not intended for use anywhere other than on www.openstreetmap.org - they're an implementation detail of the web site and not something intended for use elsewhere.

Yes there's nothing stopping them being used elsewhere for public traces, but if you choose to make your traces private then they'll only be visible to you when you are logged in on osm.org.

As to why I closed the ticket, well there is no bug here so what else should I do? It's not meant to be unhelpful at all - I explained what was happening and under what conditions the images would be visible and then closed the ticket.

tomhughes on 19 May 2018

well there is no bug here so what else should I do?

As I said: "I suggest to ask if the person who opened the issue is satisfied with the answer and can close the issue himself, and only if there's no response within a given time limit then close it."

As to my question/feature request.
I would like to be able to present images of private routes outside osm.org. I understand there's no way to do it now. Any chance to support this?

HarelM on 21 May 2018

I suggest to ask if the person who opened the issue is satisfied with the answer and can close the issue himself, and only if there's no response within a given time limit then close it.

That means this repo has even more open issues and needs more management time. (Looking at old issues if they could be closed because of a reaction "timeout").

Tom has imo more useful things to do.

A message could be added in such case:
"I hope your issue is solved with this answer and will close this Github issue therefor. If not feel free to ask further questions and/or ask for reopen the issue."