HTTP API: grafana /render calls nows with api keys, Fixes #1649

pkg/api/render.go

@@ -13,6 +13,18 @@ import (
 func RenderToPng(c *middleware.Context) {
 	queryReader := util.NewUrlQueryReader(c.Req.URL)
 	queryParams := fmt.Sprintf("?%s", c.Req.URL.RawQuery)
+	sessionId := c.Session.ID()
+
+	// Handle api calls authenticated without session
+	if sessionId == "" && c.ApiKeyId != 0 {
+		c.Session.Start(c)
+		c.Session.Set(middleware.SESS_KEY_APIKEY, c.ApiKeyId)
+		// release will make sure the new session is persisted before
+		// we spin up phantomjs
+		c.Session.Release()
+		// cleanup session after render is complete
+		defer func() { c.Session.Destory(c) }()
+	}
 
 	renderOpts := &renderer.RenderOpts{
 		Url:       c.Params("*") + queryParams,