Adding redirect to /stac/stac when using twitcher

CHANGES.md

@@ -15,7 +15,11 @@
 [Unreleased](https://github.com/bird-house/birdhouse-deploy/tree/master) (latest)
 ------------------------------------------------------------------------------------------------------------------
 
-[//]: # (list changes here, using '-' for each new entry, remove this when items are added)
+## Fixes
+
+- Fix invalid endpoint redirect for `STAC` when using Twitcher/Magpie.
+
+- Now Apply Magpie permission on `/stac/stac` since the second `/stac` is needed to secure access properly.
 
 [1.31.2](https://github.com/bird-house/birdhouse-deploy/tree/1.31.2) (2023-09-13)
 ------------------------------------------------------------------------------------------------------------------

birdhouse/components/stac/config/proxy/conf.extra-service.d/stac.conf.template

@@ -12,6 +12,11 @@
         include /etc/nginx/conf.d/cors.include;
     }
 
+    # Automatically redirect to /stac/stac and exclude redirect when already using /stac 
+    location ~ ^${TWITCHER_PROTECTED_PATH}/stac(?!/stac) {
+        return 302 ${TWITCHER_PROTECTED_PATH}/stac/stac;
+    }
+
     location /stac-browser/ {
         # STAC API is protected behind Twitcher so we might not need to protect the browser as well.
         # In case we encounter a valid use case in which we need to protect the browser, we might 

birdhouse/optional-components/stac-public-access/config/magpie/config.yml.template

@@ -10,10 +10,12 @@ providers:
 
 permissions:
   - service: stac
+    resource: /stac
     permission: read
     group: anonymous
     action: create
   - service: stac
+    resource: /stac
     permission: write
     group: stac-admin
     action: create