Add environment variable to disable Transaction extension in provided pgstac app

[jtherrmann]

See #492

[geospatial-jeff]

@jtherrmann thinking of how to make this more applicable to the other extensions. How about an environment variable ENABLED_EXTENSIONS which accepts a comma-delimited string (ex. transactions,sort,query) determining what extensions are added to the application.

If it is not present all extensions would be enabled.

[jtherrmann]

@geospatial-jeff Is there a use-case for disabling other extensions? The Transaction extension is the only one that I would want to disable, for security reasons, but I can't think of a reason for disabling any of the others.

Edit: In any case, take a look at the most recent commit and let me know if that's along the lines of what you were suggesting.

[gadomski]

CI is breaking because we need to ceil the fastapi version (e.g. cb76e2e). @geospatial-jeff if you could approve #487, we can merge that to pick up the fix.

[gadomski]

Thanks @geospatial-jeff! @jtherrmann if you update with main and re-push hopefully things will fix.

[geospatial-jeff]

Is there a use-case for disabling other extensions? The Transaction extension is the only one that I would want to disable, for security reasons, but I can't think of a reason for disabling any of the others.

I agree that transactions is probably the one most people would want to remove. The reason to allow users to disable other is that extensions in the STAC API spec are optional (add-ons), and therefore should be allowed to be disabled even if that functionality is not used by most people.

[geospatial-jeff]

This LGTM! Thanks very much @jtherrmann 🙏

[jtherrmann]

Thanks @geospatial-jeff! When can we expect a release so that we can use this functionality (without installing from our fork)?

[geospatial-jeff]

I can cut the next release this weekend, there are a few other outstanding PRs I want to get merged.

[jtherrmann]

@geospatial-jeff Great, thanks!

[geospatial-jeff]

Sorry for the delay, I got a nasty case of the flu and have been out the past week. I will cut a new release today @jtherrmann . Thanks for your patience!

[jtherrmann]

@geospatial-jeff No worries, hope you're feeling better! Thanks!!