GeoLens plugin: a possible transformRequest path for private rasters, plus a PUBLIC_BASE_URL note

[ishiland]

Hi @giswqs, following on from geolens-io/geolens#665, two more things from reading the catalog browser plugin (#1377). The tile-token refresh handling in it is more careful than I expected.

1. Private rasters: transformRequest might get you there

map.setTransformRequest() attaches arbitrary headers per request, including on raster sources. We use it in production for exactly this:

map.setTransformRequest((url: string) => {
  const absUrl = url.startsWith('http') ? url : `${window.location.origin}${url}`;
  if (absUrl.includes('/raster-tiles/')) {
    const token = useAuthStore.getState().token;
    if (token) return { url: absUrl, headers: { Authorization: `Bearer ${token}` } };
  }
  return { url: absUrl };
});

Two things I checked first. A preflight from https://web.geolibre.app for /raster-tiles/{id}/tiles/{z}/{x}/{y}.png with X-Api-Key returns 200 against our demo, so cross-origin isn't the blocker. And GeoLibre calls transformRequest nowhere today, so a plugin installing one won't clobber the host (though it's last-writer-wins if two ever want it).

Untested: maplibre v5's header handling on raster sources in your build. Ours is same-origin with a bearer token, so treat this as a lead rather than a guarantee.

You're right that we should return a signed raster template like we do for vector tiles. I've opened geolens-io/geolens#688 for it; I'd rather fix that properly than leave you on a workaround.

2. datasets.geolibre.app advertises an internal origin

"self" -> http://localhost:8080/api/collections/datasets/items?offset=0&limit=1

Setting PUBLIC_BASE_URL fixes self, next and root. Probably why the client rebases hrefs instead of following them. tauri://localhost also doesn't look allowlisted in that instance's CORS_ALLOWED_ORIGINS, which the desktop build needs.

I've set our demo's CORS up for GeoLibre's origins, so demo.getgeolens.com works as a server URL now too.

Happy to send a PR for the raster change if that's easier than me describing it.

[giswqs]

@ishiland Thank you for the suggestions and setting the GeoLens' CORS for GeoLibre's origins. I would greatly apprciate a PR for this. Thank you.