-
@@ -84,16 +84,15 @@
- Things ERDDAP Administrators Need to Know and Do:
- TO DO: SECURITY CHANGE: Google Authentication is now accomplished via the new
- Google Identity Services library. Google's support for the old OAuth2 system
- will be discontinued 2023-03-15 ("Beware the Ide's of March"?!)
+ Google Identity Services library which is part of "Sign In with Google".
+ Google's support for the old "Google Sign In" system will be discontinued 2023-03-31.
So if you use Google Authentication in your ERDDAP installation,
- you MUST update to ERDDAP v2.23 before then.
+ you MUST update to ERDDAP v2.23+ before then.
(Bob is sorry for the short notice. It's Bob's fault.)
- - IMPROVED: NCCSV is now v1.2. The change is that the files are now UTF-8-encoded files (was ASCII) - and so can now include any Unicode character - (as is, without encoding as \uhhhh, although that is still allowed). +
- IMPROVED: NCCSV is now v1.2. The change is that the files are now UTF-8-encoded files (they were ASCII)
+ and so can now include any Unicode character as is, without encoding as \uhhhh, although that is still allowed.
When writing NCCSV files, ERDDAP now writes v1.2 files.
ERDDAP will still read NCCSV files that follow the v1.0 and v1.1 specification.
Thanks to Pauline-Chauvet, n-a-t-e, and thogar-computer for suggesting this @@ -7043,7 +7042,7 @@Contact<
-ERDDAP, Version 2.22 +
ERDDAP, Version 2.23
Disclaimers | Privacy Policy diff --git a/download/grids.html b/download/grids.html index c381833c3..c7c58692a 100644 --- a/download/grids.html +++ b/download/grids.html @@ -1248,7 +1248,7 @@Disclaimers | Privacy Policy diff --git a/download/setup.html b/download/setup.html index 5dcfd9676..4336447df 100644 --- a/download/setup.html +++ b/download/setup.html @@ -816,10 +816,10 @@
-->
On Linux, Mac, and Windows, download - + erddapContent.zip - (version 2.22, 19810 bytes, MD5=1E26F62E7A06191EE6868C40B9A29362, dated 2022-12-08) + href="https://github.com/BobSimons/erddap/releases/download/v2.23/erddapContent.zip">erddapContent.zip
+ (version 2.23, 19810 bytes, MD5=1E26F62E7A06191EE6868C40B9A29362, dated 2023-02-27)
and unzip it into tomcat, creating tomcat/content/erddap .
- TO DO: SECURITY CHANGE: Google Authentication is now accomplished via the new
- Google Identity Services library. Google's support for the old OAuth2 system
- will be discontinued 2023-03-15 ("Beware the Ide's of March"?!)
+ Google Identity Services library which is part of "Sign In with Google".
+ Google's support for the old "Google Sign In" system will be discontinued 2023-03-31.
So if you use Google Authentication in your ERDDAP installation,
- you MUST update to ERDDAP v2.23 before then.
+ you MUST update to ERDDAP v2.23+ before then.
(Bob is sorry for the short notice. It's Bob's fault.)
- Use ProxyPass
@@ -1178,10 +1185,10 @@
How To Do an U
- Download erddap.war + href="https://github.com/BobSimons/erddap/releases/download/v2.23/erddap.war">erddap.war
into tomcat/webapps . -
(version 2.22, 567,742,765 bytes, MD5=2B33354F633294213AE2AFDDCF4DA6D0, dated - 2022-12-08) +
(version 2.23, 572,124,953 bytes, MD5=D843A043C506725EBD6F8EFDCCA8FD5F, dated + 2023-02-27)
- messages.xml
@@ -3252,8 +3259,8 @@
Things
- The google authentication option uses
- Google Sign-In
Sign In with Google
,
which is an implementation of the
@@ -3267,6 +3274,18 @@ Things and access their profile image, but does not give ERDDAP access to their emails, their Google Drive, or any other private information. + +
For ERDDAP v2.22 and below, ERDDAP used "Google Sign-In". Google says that system + is deprecated after March 31, 2023. If you haven't already done so, + please switch to ERDDAP v2.23+ to use the new "Sign In with Google"-based + authentication system. + +
For ERDDAP v2.23+ instances with a Content-Security-Policy configured and + using Google Authentication, you need to add https://accounts.google.com + to the list of allowed script-src (or script-src-elem). + ERDDAP no longer uses https://apis.google.com, so if you have that allowed, + you may be able to remove it now. + If you have any questions, contact chris.john at noaa.gov.
- The orcid authentication option uses @@ -4728,7 +4747,7 @@
Code Contributions
If you have written some code which would be a nice addition to ERDDAP (or better, before you write the code so that we can coordinate), - please email erd dot data at noaa dot gov. We'll work out the details. + please email chris dot john at noaa dot gov. We'll work out the details. The most likely situations are:- You want to write another subclass of EDDGrid or EDDTable to handle another data source type.
@@ -4777,21 +4796,22 @@
In contrast to the above "Work with the BDFL", after you get started on the + project, the BDFL encourages you to work as independently as possible. + If the BDFL has to tell you almost everything and answer lots of questions (especially ones that you could have answered by reading the documentation or the code), - then your efforts aren't a time savings for me and - I might as well do the work myself. + then your efforts aren't a time savings for the BDFL and + s/he might as well do the work themself. It's the Mythical Man Month
- - Make it easy for me to understand and accept the changes in your pull request. +
- Make it easy for the BDFL to understand and accept the changes in your pull request.
holding the copyright. The license is:
Part of that is writing a unit test method(s). Part of that is limiting your changes to one section of code (or one class) if possible. - I won't accept any pull request with hundreds of changes throughout the code. - I tell the IT security people that I take responsibility for the security + The BDFL won't accept any pull request with hundreds of changes throughout the code. + The BDFL tells the IT security people that s/he takes responsibility for the security and integrity of the code. If there are too many changes or they are too hard to figure out, then it's just too hard to verify the changes are correct and don't introduce @@ -4895,7 +4915,7 @@License< title="This link to an external website does not constitute an endorsement.">
-ERDDAP, Copyright 2022, NOAA. +ERDDAP, Copyright 2023, NOAA.
PERMISSION TO USE, COPY, MODIFY, AND DISTRIBUTE THIS SOFTWARE AND ITS DOCUMENTATION FOR ANY PURPOSE AND WITHOUT FEE IS HEREBY GRANTED, @@ -5609,7 +5629,7 @@
Contact<
-ERDDAP, Version 2.22 +
ERDDAP, Version 2.23
Disclaimers | Privacy Policy diff --git a/download/setupDatasetsXml.html b/download/setupDatasetsXml.html index 767895374..ed4368cac 100644 --- a/download/setupDatasetsXml.html +++ b/download/setupDatasetsXml.html @@ -15779,7 +15779,7 @@Contact<
-ERDDAP, Version 2.22 +
ERDDAP, Version 2.23
Disclaimers | Privacy Policy
- The orcid authentication option uses @@ -4728,7 +4747,7 @@
- The google authentication option uses
- Google Sign-In
Chan
2.21
(19,810 bytes, MD5=1E26F62E7A06191EE6868C40B9A29362, dated 2022-10-09)
+
2.22
+ (19,810 bytes, MD5=1E26F62E7A06191EE6868C40B9A29362, dated 2022-12-08)
+
and unzip it into tomcat, creating tomcat/content/erddap .
]
Then, @@ -901,7 +905,7 @@
valueName
before running ERDDAP.
For example, use ERDDAP_baseUrl overrides the <baseUrl> value.
- This can be handy when deploying ERDDAP with a container, as you can
+ This can be handy when deploying ERDDAP with a container like Docker, as you can
put standard settings in setup.xml and then supply special settings
via environment variables.
If you supply secret information to ERDDAP via this method, be sure
@@ -940,13 +944,13 @@ Install the erddap.war file.
On Linux, Mac, and Windows, download
-
erddap.war
+ href="https://github.com/BobSimons/erddap/releases/download/v2.23/erddap.war">erddap.war
into tomcat/webapps .
-
(version 2.22, 567,742,765 bytes, MD5=2B33354F633294213AE2AFDDCF4DA6D0, dated
- 2022-12-08)
+
(version 2.23, 572,124,953 bytes, MD5=D843A043C506725EBD6F8EFDCCA8FD5F, dated
+ 2023-02-27)
The .war file is big because it contains high resolution coastline, boundary,
and elevation data needed to create maps.
@@ -983,6 +987,9 @@ 2.21
(568,644,411 bytes, MD5=F2CFF805893146E932E498FDDBD519B6, dated 2022-10-09)
+
2.22
+ (567,742,765 bytes, MD5=2B33354F633294213AE2AFDDCF4DA6D0, dated 2022-12-08)
]
On Linux, Mac, and Windows, download - erddap.war + href="https://github.com/BobSimons/erddap/releases/download/v2.23/erddap.war">erddap.war
2.22 + (567,742,765 bytes, MD5=2B33354F633294213AE2AFDDCF4DA6D0, dated 2022-12-08) ]