c2cgeoportal-geoportal 2.7.1.156__py2.py3-none-any.whl → 2.8.1.180__py2.py3-none-any.whl

c2cgeoportal_geoportal/views/login.py

@@ -1,4 +1,4 @@
-# Copyright (c) 2011-2022, Camptocamp SA
+# Copyright (c) 2011-2024, Camptocamp SA
 # All rights reserved.
 
 # Redistribution and use in source and binary forms, with or without
@@ -28,9 +28,9 @@
 
 import json
 import logging
-import secrets
 import sys
 import urllib.parse
+from random import Random
 from typing import Any, Dict, List, Optional, Tuple, Union
 
 import pyotp
@@ -88,7 +88,7 @@ class Login:
         if not hasattr(self.request, "is_valid_referer"):
             self.request.is_valid_referer = is_valid_referrer(self.request)
         if not self.request.is_valid_referer:
-            LOG.info("Invalid referer for %s: %s", self.request.path_qs, repr(self.request.referer))
+            LOG.info("Invalid referrer for %s: %s", self.request.path_qs, repr(self.request.referrer))
 
     @forbidden_view_config(renderer="login.html")  # type: ignore
     def loginform403(self) -> Union[Dict[str, Any], pyramid.response.Response]:
@@ -341,11 +341,12 @@ class Login:
 
     @staticmethod
     def generate_password() -> str:
-        all_chars = "123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
+        allchars = "123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
+        rand = Random()  # nosec
 
         password = ""  # nosec
         for _ in range(8):
-            password += secrets.choice(all_chars)
+            password += rand.choice(allchars)
 
         return password
 
@@ -397,6 +398,36 @@ class Login:
 
         return {"success": True}
 
+    @view_config(route_name="oauth2introspect")  # type: ignore
+    def oauth2introspect(self) -> pyramid.response.Response:
+        LOG.debug(
+            "Call OAuth create_introspect_response with:\nurl: %s\nmethod: %s\nbody:\n%s",
+            self.request.current_route_url(_query=self.request.GET),
+            self.request.method,
+            self.request.body,
+        )
+        headers, body, status = oauth2.get_oauth_client(
+            self.request.registry.settings
+        ).create_introspect_response(
+            self.request.current_route_url(_query=self.request.GET),
+            self.request.method,
+            self.request.body,
+            self.request.headers,
+        )
+        LOG.debug("OAuth create_introspect_response return status: %s", status)
+
+        # All requests to /token will return a json response, no redirection.
+        if status != 200:
+            if body:
+                raise exception_response(status, detail=body)
+            raise exception_response(status)
+        return set_common_headers(
+            self.request,
+            "login",
+            Cache.PRIVATE_NO,
+            response=Response(body, headers=headers.items()),
+        )
+
     @view_config(route_name="oauth2token")  # type: ignore
     def oauth2token(self) -> pyramid.response.Response:
         LOG.debug(
@@ -414,9 +445,6 @@ class Login:
         )
         LOG.debug("OAuth create_token_response return status: %s", status)
 
-        if hasattr(self.request, "tm"):
-            self.request.tm.commit()
-
         # All requests to /token will return a json response, no redirection.
         if status != 200:
             if body:
@@ -429,6 +457,33 @@ class Login:
             response=Response(body, headers=headers.items()),
         )
 
+    @view_config(route_name="oauth2revoke_token")  # type: ignore
+    def oauth2revoke_token(self) -> pyramid.response.Response:
+        LOG.debug(
+            "Call OAuth create_revocation_response with:\nurl: %s\nmethod: %s\nbody:\n%s",
+            self.request.create_revocation_response(_query=self.request.GET),
+            self.request.method,
+            self.request.body,
+        )
+        headers, body, status = oauth2.get_oauth_client(
+            self.request.registry.settings
+        ).create_authorize_response(
+            self.request.current_route_url(_query=self.request.GET),
+            self.request.method,
+            self.request.body,
+            self.request.headers,
+        )
+        if status != 200:
+            if body:
+                raise exception_response(status, detail=body)
+            raise exception_response(status)
+        return set_common_headers(
+            self.request,
+            "login",
+            Cache.PRIVATE_NO,
+            response=Response(body, headers=headers.items()),
+        )
+
     @view_config(route_name="oauth2loginform", renderer="login.html")  # type: ignore
     def oauth2loginform(self) -> Dict[str, Any]:
         set_common_headers(self.request, "login", Cache.PUBLIC)

c2cgeoportal_geoportal/views/mapserverproxy.py

@@ -29,7 +29,7 @@
 import logging
 from typing import Any, Dict, Set
 
-from pyramid.httpexceptions import HTTPFound, HTTPInternalServerError, HTTPUnauthorized
+from pyramid.httpexceptions import HTTPForbidden, HTTPFound, HTTPInternalServerError, HTTPUnauthorized
 from pyramid.request import Request
 from pyramid.response import Response
 from pyramid.view import view_config
@@ -67,7 +67,7 @@ class MapservProxy(OGCProxy):
                 raise HTTPUnauthorized(
                     headers={"WWW-Authenticate": 'Basic realm="Access to restricted layers"'}
                 )
-            raise HTTPUnauthorized(headers={"WWW-Authenticate": 'Bearer realm="Access to restricted layers"'})
+            raise HTTPForbidden("Basic auth is not enabled")
 
         # We have a user logged in. We need to set group_id and possible layer_name in the params. We set
         # layer_name when either QUERY_PARAMS or LAYERS is set in the WMS params, i.e. for GetMap and
@@ -108,7 +108,6 @@ class MapservProxy(OGCProxy):
                 self.params = {}
             else:
                 if self.ogc_server.type != main.OGCSERVER_TYPE_QGISSERVER or "user_id" not in self.params:
-
                     use_cache = self.lower_params["request"] in ("getlegendgraphic",)
 
                     # no user_id and role_id or cached queries

c2cgeoportal_geoportal/views/ogcproxy.py

@@ -1,4 +1,4 @@
-# Copyright (c) 2011-2022, Camptocamp SA
+# Copyright (c) 2011-2023, Camptocamp SA
 # All rights reserved.
 
 # Redistribution and use in source and binary forms, with or without
@@ -60,6 +60,8 @@ class OGCProxy(Proxy):
         if "user_id" in self.params:
             del self.params["user_id"]
 
+        main_ogc_server = self.request.registry.settings.get("main_ogc_server")
+
         self.lower_params = self._get_lower_params(self.params)
 
         # We need original case for OGCSERVER parameter value
@@ -69,11 +71,13 @@ class OGCProxy(Proxy):
             self.ogc_server = self._get_ogcserver_byname(request.matchdict["ogcserver"])
         elif "ogcserver" in self.lower_key_params:
             self.ogc_server = self._get_ogcserver_byname(self.lower_key_params["ogcserver"])
+        elif main_ogc_server is not None:
+            self.ogc_server = self._get_ogcserver_byname(main_ogc_server)
         elif not has_default_ogc_server:
             raise HTTPBadRequest("The querystring argument 'ogcserver' is required")
 
     @CACHE_REGION.cache_on_arguments()  # type: ignore
-    def _get_ogcserver_byname(self, name: str) -> main.OGCServer:  # pylint: disable=no-self-use
+    def _get_ogcserver_byname(self, name: str) -> main.OGCServer:
         try:
             result = DBSession.query(main.OGCServer).filter(main.OGCServer.name == name).one()
             DBSession.expunge(result)

c2cgeoportal_geoportal/views/pdfreport.py

@@ -1,4 +1,4 @@
-# Copyright (c) 2011-2021, Camptocamp SA
+# Copyright (c) 2011-2024, Camptocamp SA
 # All rights reserved.
 
 # Redistribution and use in source and binary forms, with or without
@@ -106,14 +106,14 @@ class PdfReport(OGCProxy):
         self.layername = self.request.matchdict["layername"]
         layer_config = self.config["layers"].get(self.layername)
 
+        if layer_config is None:
+            raise HTTPBadRequest("Layer not found: " + self.layername)
+
         multiple = layer_config.get("multiple", False)
         ids = self.request.matchdict["ids"]
         if multiple:
             ids = ids.split(",")
 
-        if layer_config is None:
-            raise HTTPBadRequest("Layer not found")
-
         features_ids = (
             [self.layername + "." + id_ for id_ in ids] if multiple else [self.layername + "." + ids]
         )

c2cgeoportal_geoportal/views/printproxy.py

@@ -68,8 +68,8 @@ class PrintProxy(Proxy):
         )
 
         response = self._build_response(resp, content, Cache.PRIVATE, "print")
-        # Mapfish print will check the referer header to return the capabilities.
-        response.vary += ("Referer",)
+        # Mapfish print will check the referrer header to return the capabilities.
+        response.vary += ("Referrer", "Referer")
         return response
 
     @CACHE_REGION.cache_on_arguments()  # type: ignore

c2cgeoportal_geoportal/views/profile.py

@@ -1,4 +1,4 @@
-# Copyright (c) 2012-2021, Camptocamp SA
+# Copyright (c) 2012-2023, Camptocamp SA
 # All rights reserved.
 
 # Redistribution and use in source and binary forms, with or without

c2cgeoportal_geoportal/views/proxy.py

@@ -1,5 +1,3 @@
-# -*- coding: utf-8 -*-
-
 # Copyright (c) 2011-2024, Camptocamp SA
 # All rights reserved.
 
@@ -47,7 +45,7 @@ CACHE_REGION = get_region("std")
 
 
 class Proxy:
-    """Some methodes used by all the proxy."""
+    """Some methods used by all the proxy."""
 
     def __init__(self, request: pyramid.request.Request):
         self.request = request
@@ -252,7 +250,7 @@ class Proxy:
 
     @staticmethod
     def _get_lower_params(params: Dict[str, str]) -> Dict[str, str]:
-        return dict((k.lower(), str(v).lower()) for k, v in params.items())
+        return {k.lower(): str(v).lower() for k, v in params.items()}
 
     def get_headers(self) -> Dict[str, str]:
         headers: Dict[str, str] = self.request.headers

c2cgeoportal_geoportal/views/raster.py

@@ -1,4 +1,4 @@
-# Copyright (c) 2012-2021, Camptocamp SA
+# Copyright (c) 2012-2023, Camptocamp SA
 # All rights reserved.
 
 # Redistribution and use in source and binary forms, with or without
@@ -167,7 +167,7 @@ class Raster:
             result = None if result == layer.get("nodata", dataset.nodata) else result
         else:
             LOG.debug(
-                "Out of index for layer: %s (%s), " "lon/lat: %dx%d, index: %dx%d, shape: %dx%d.",
+                "Out of index for layer: %s (%s), lon/lat: %dx%d, index: %dx%d, shape: %dx%d.",
                 name,
                 layer["file"],
                 lon,

c2cgeoportal_geoportal/views/resourceproxy.py

@@ -1,4 +1,4 @@
-# Copyright (c) 2011-2021, Camptocamp SA
+# Copyright (c) 2011-2023, Camptocamp SA
 # All rights reserved.
 
 # Redistribution and use in source and binary forms, with or without

c2cgeoportal_geoportal/views/shortener.py

@@ -1,4 +1,4 @@
-# Copyright (c) 2013-2022, Camptocamp SA
+# Copyright (c) 2013-2023, Camptocamp SA
 # All rights reserved.
 
 # Redistribution and use in source and binary forms, with or without
@@ -71,7 +71,6 @@ class Shortener:
 
     @view_config(route_name="shortener_create", renderer="json")  # type: ignore
     def create(self) -> Dict[str, str]:
-
         if "url" not in self.request.params:
             raise HTTPBadRequest("The parameter url is required")
 

c2cgeoportal_geoportal/views/theme.py

@@ -1,4 +1,4 @@
-# Copyright (c) 2011-2022, Camptocamp SA
+# Copyright (c) 2011-2024, Camptocamp SA
 # All rights reserved.
 
 # Redistribution and use in source and binary forms, with or without
@@ -38,6 +38,7 @@ from math import sqrt
 from typing import Any, Dict, List, Optional, Set, Tuple, Union, cast
 
 import dogpile.cache.api
+import pyramid.httpexceptions
 import pyramid.request
 import requests
 import sqlalchemy
@@ -52,7 +53,7 @@ from sqlalchemy.orm.exc import NoResultFound
 
 from c2cgeoportal_commons import models
 from c2cgeoportal_commons.lib.url import Url, get_url2
-from c2cgeoportal_commons.models import main
+from c2cgeoportal_commons.models import cache_invalidate_cb, main
 from c2cgeoportal_geoportal.lib import get_roles_id, get_typed, get_types_map, is_intranet
 from c2cgeoportal_geoportal.lib.caching import get_region
 from c2cgeoportal_geoportal.lib.common_headers import Cache, set_common_headers
@@ -63,27 +64,31 @@ from c2cgeoportal_geoportal.lib.layers import (
     get_protected_layers_query,
 )
 from c2cgeoportal_geoportal.lib.wmstparsing import TimeInformation, parse_extent
-from c2cgeoportal_geoportal.views import restrict_headers
 from c2cgeoportal_geoportal.views.layers import get_layer_metadata
 
 LOG = logging.getLogger(__name__)
 CACHE_REGION = get_region("std")
+CACHE_OGC_SERVER_REGION = get_region("ogc-server")
 TIMEOUT = int(os.environ.get("C2CGEOPORTAL_THEME_TIMEOUT", "300"))
 
 Metadata = Union[str, int, float, bool, List[Any], Dict[str, Any]]
 
 
-def get_http_cached(http_options: Dict[str, Any], url: str, headers: Dict[str, str]) -> Tuple[bytes, str]:
+def get_http_cached(
+    http_options: Dict[str, Any], url: str, headers: Dict[str, str], cache: bool = True
+) -> Tuple[bytes, str]:
     """Get the content of the URL with a cash (dogpile)."""
 
-    @CACHE_REGION.cache_on_arguments()  # type: ignore
+    @CACHE_OGC_SERVER_REGION.cache_on_arguments()  # type: ignore
     def do_get_http_cached(url: str) -> Tuple[bytes, str]:
         response = requests.get(url, headers=headers, timeout=TIMEOUT, **http_options)
         response.raise_for_status()
-        LOG.info("Get url '%s' in %.1fs.", url, response.elapsed.total_seconds())
+        LOG.info("Get URL '%s' in %.1fs.", url, response.elapsed.total_seconds())
         return response.content, response.headers.get("Content-Type", "")
 
-    return do_get_http_cached(url)  # type: ignore
+    if cache:
+        return do_get_http_cached(url)  # type: ignore
+    return do_get_http_cached.refresh(url)  # type: ignore
 
 
 class DimensionInformation:
@@ -143,8 +148,6 @@ class Theme:
         self.request = request
         self.settings = request.registry.settings
         self.http_options = self.settings.get("http_options", {})
-        self.headers_whitelist = self.settings.get("headers_whitelist", [])
-        self.headers_blacklist = self.settings.get("headers_blacklist", [])
         self.metadata_type = get_types_map(
             self.settings.get("admin_interface", {}).get("available_metadata", [])
         )
@@ -179,14 +182,16 @@ class Theme:
         return metadatas
 
     async def _wms_getcap(
-        self, ogc_server: main.OGCServer, preload: bool = False
+        self, ogc_server: main.OGCServer, preload: bool = False, cache: bool = True
     ) -> Tuple[Optional[Dict[str, Dict[str, Any]]], Set[str]]:
-        @CACHE_REGION.cache_on_arguments()  # type: ignore
+        LOG.debug("Get the WMS Capabilities of '%s', preload: %s, cache: %s", ogc_server.name, preload, cache)
+
+        @CACHE_OGC_SERVER_REGION.cache_on_arguments()  # type: ignore
         def build_web_map_service(ogc_server_id: int) -> Tuple[Optional[Dict[str, Dict[str, Any]]], Set[str]]:
             del ogc_server_id  # Just for cache
 
             if url is None:
-                raise RuntimeError("Url is None")
+                raise RuntimeError("URL is None")
 
             version = url.query.get("VERSION", "1.1.1")
             layers = {}
@@ -220,16 +225,16 @@ class Theme:
                 }
 
             del wms
-            LOG.debug("Run garbage collection: %s", ", ".join([str(gc.collect(n)) for n in range(3)]))
 
             return {"layers": layers}, set()
 
-        result = build_web_map_service.get(ogc_server.id)
-        if result != dogpile.cache.api.NO_VALUE:
-            return result  # type: ignore
+        if cache:
+            result = build_web_map_service.get(ogc_server.id)
+            if result != dogpile.cache.api.NO_VALUE:
+                return result  # type: ignore
 
         try:
-            url, content, errors = await self._wms_getcap_cached(ogc_server)
+            url, content, errors = await self._wms_getcap_cached(ogc_server, cache=cache)
         except requests.exceptions.RequestException as exception:
             error = (
                 f"Unable to get the WMS Capabilities for OGC server '{ogc_server.name}', "
@@ -240,10 +245,10 @@ class Theme:
         if errors or preload:
             return None, errors
 
-        return build_web_map_service(ogc_server.id)  # type: ignore
+        return build_web_map_service.refresh(ogc_server.id)  # type: ignore
 
     async def _wms_getcap_cached(
-        self, ogc_server: main.OGCServer
+        self, ogc_server: main.OGCServer, cache: bool = True
     ) -> Tuple[Optional[Url], Optional[bytes], Set[str]]:
         errors: Set[str] = set()
         url = get_url2(f"The OGC server '{ogc_server.name}'", ogc_server.url, self.request, errors)
@@ -269,23 +274,15 @@ class Theme:
 
         LOG.debug("Get WMS GetCapabilities for URL: %s", url)
 
-        # Forward request to target (without Host Header)
-        headers = dict(self.request.headers)
+        headers = {}
 
         # Add headers for Geoserver
         if ogc_server.auth == main.OGCSERVER_AUTH_GEOSERVER:
             headers["sec-username"] = "root"
             headers["sec-roles"] = "root"
 
-        if url.hostname != "localhost" and "Host" in headers:
-            headers.pop("Host")
-
-        headers = restrict_headers(headers, self.headers_whitelist, self.headers_blacklist)
-
         try:
-            content, content_type = await asyncio.get_event_loop().run_in_executor(
-                None, get_http_cached, self.http_options, url, headers
-            )
+            content, content_type = get_http_cached(self.http_options, url.url(), headers, cache=cache)
         except Exception:
             error = f"Unable to GetCapabilities from URL {url}"
             errors.add(error)
@@ -386,8 +383,6 @@ class Theme:
         layer_info = {"id": layer.id, "name": layer.name, "metadata": self._get_metadata_list(layer, errors)}
         if re.search("[/?#]", layer.name):
             errors.add(f"The layer has an unsupported name '{layer.name}'.")
-        if isinstance(layer, main.LayerWMS) and re.search("[/?#]", layer.layer):
-            errors.add(f"The layer has an unsupported layers '{layer.layer}'.")
         if layer.geo_table:
             errors |= self._fill_editable(layer_info, layer)
         if mixed:
@@ -858,7 +853,7 @@ class Theme:
         return None if self.request.user is None else {role.id for role in self.request.user.roles}
 
     async def _wfs_get_features_type(
-        self, wfs_url: Url, ogc_server_name: str, preload: bool = False
+        self, wfs_url: Url, ogc_server: main.OGCServer, preload: bool = False, cache: bool = True
     ) -> Tuple[Optional[etree.Element], Set[str]]:
         errors = set()
 
@@ -872,23 +867,23 @@ class Theme:
             }
         )
 
-        LOG.debug("WFS DescribeFeatureType for the URL: %s", wfs_url)
+        LOG.debug(
+            "Get the WFS DescribeFeatureType of '%s', preload: %s, cache: %s", ogc_server.name, preload, cache
+        )
 
-        # forward request to target (without Host Header)
-        headers = dict(self.request.headers)
-        if wfs_url.hostname != "localhost" and "Host" in headers:
-            headers.pop("Host")
+        headers = {}
 
-        headers = restrict_headers(headers, self.headers_whitelist, self.headers_blacklist)
+        # Add headers for Geoserver
+        if ogc_server.auth == main.OGCSERVER_AUTH_GEOSERVER:
+            headers["sec-username"] = "root"
+            headers["sec-roles"] = "root"
 
         try:
-            content, _ = await asyncio.get_event_loop().run_in_executor(
-                None, get_http_cached, self.http_options, wfs_url, headers
-            )
+            content, _ = get_http_cached(self.http_options, wfs_url.url(), headers, cache)
         except requests.exceptions.RequestException as exception:
             error = (
                 f"Unable to get WFS DescribeFeatureType from the URL '{wfs_url.url()}' for "
-                f"OGC server {ogc_server_name}, "
+                f"OGC server {ogc_server.name}, "
                 + (
                     f"return the error: {exception.response.status_code} {exception.response.reason}"
                     if exception.response is not None
@@ -901,7 +896,7 @@ class Theme:
         except Exception:
             error = (
                 f"Unable to get WFS DescribeFeatureType from the URL {wfs_url} for "
-                f"OGC server {ogc_server_name}"
+                f"OGC server {ogc_server.name}"
             )
             errors.add(error)
             LOG.exception(error)
@@ -948,10 +943,10 @@ class Theme:
             url_internal_wfs = url_wfs
         return url_internal_wfs, url, url_wfs
 
-    async def preload(self, errors: Set[str]) -> None:
+    async def _preload(self, errors: Set[str]) -> None:
         tasks = set()
         for ogc_server in models.DBSession.query(main.OGCServer).all():
-            # Don't load unused OGC servers, required for Landigpage, because the related OGC server
+            # Don't load unused OGC servers, required for landing page, because the related OGC server
             # will be on error in those functions.
             nb_layers = (
                 models.DBSession.query(sqlalchemy.func.count(main.LayerWMS.id))
@@ -963,26 +958,30 @@ class Theme:
                 LOG.debug("Preload OGC server '%s'", ogc_server.name)
                 url_internal_wfs, _, _ = self.get_url_internal_wfs(ogc_server, errors)
                 if url_internal_wfs is not None:
-                    if ogc_server.wfs_support:
-                        tasks.add(self._wfs_get_features_type(url_internal_wfs, ogc_server.name, True))
-                    tasks.add(self._wms_getcap(ogc_server, True))
+                    tasks.add(self.preload_ogc_server(ogc_server, url_internal_wfs))
 
         await asyncio.gather(*tasks)
 
+    async def preload_ogc_server(
+        self, ogc_server: main.OGCServer, url_internal_wfs: Url, cache: bool = True
+    ) -> None:
+        if ogc_server.wfs_support:
+            await self._get_features_attributes(url_internal_wfs, ogc_server, cache=cache)
+        await self._wms_getcap(ogc_server, False, cache=cache)
+
     async def _get_features_attributes(
-        self, url_internal_wfs: Url, ogc_server_name: str
+        self, url_internal_wfs: Url, ogc_server: main.OGCServer, cache: bool = True
     ) -> Tuple[Optional[Dict[str, Dict[Any, Dict[str, Any]]]], Optional[str], Set[str]]:
-        @CACHE_REGION.cache_on_arguments()  # type: ignore
+        @CACHE_OGC_SERVER_REGION.cache_on_arguments()  # type: ignore
         def _get_features_attributes_cache(
             url_internal_wfs: Url, ogc_server_name: str
         ) -> Tuple[Optional[Dict[str, Dict[Any, Dict[str, Any]]]], Optional[str], Set[str]]:
             del url_internal_wfs  # Just for cache
             all_errors: Set[str] = set()
-            LOG.debug("Run garbage collection: %s", ", ".join([str(gc.collect(n)) for n in range(3)]))
             if errors:
                 all_errors |= errors
                 return None, None, all_errors
-            assert feature_type
+            assert feature_type is not None
             namespace: str = feature_type.attrib.get("targetNamespace")
             types: Dict[Any, Dict[str, Any]] = {}
             elements = {}
@@ -1041,9 +1040,8 @@ class Theme:
                     attributes[name] = types[type_]
                 elif (type_ == "Character") and (name + "Type") in types:
                     LOG.debug(
-                        "Due MapServer strange result the type 'ms:Character' is fallbacked to type '%sType'"
-                        " for feature '%s', This is a strange comportement of MapServer when we use the "
-                        'METADATA "gml_types" "auto"',
+                        'Due to MapServer weird behavior when using METADATA "gml_types" "auto"'
+                        "the type 'ms:Character' is returned as type '%sType' for feature '%s'.",
                         name,
                         name,
                     )
@@ -1057,12 +1055,14 @@ class Theme:
 
             return attributes, namespace, all_errors
 
-        result = _get_features_attributes_cache.get(url_internal_wfs, ogc_server_name)
-        if result != dogpile.cache.api.NO_VALUE:
-            return result  # type: ignore
+        if cache:
+            result = _get_features_attributes_cache.get(url_internal_wfs, ogc_server.name)
+            if result != dogpile.cache.api.NO_VALUE:
+                return result  # type: ignore
+
+        feature_type, errors = await self._wfs_get_features_type(url_internal_wfs, ogc_server, False, cache)
 
-        feature_type, errors = await self._wfs_get_features_type(url_internal_wfs, ogc_server_name)
-        return _get_features_attributes_cache(url_internal_wfs, ogc_server_name)  # type: ignore
+        return _get_features_attributes_cache.refresh(url_internal_wfs, ogc_server.name)  # type: ignore
 
     @view_config(route_name="themes", renderer="json")  # type: ignore
     def themes(self) -> Dict[str, Union[Dict[str, Dict[str, Any]], List[str]]]:
@@ -1083,11 +1083,12 @@ class Theme:
             all_errors: Set[str] = set()
             LOG.debug("Start preload")
             start_time = time.time()
-            await self.preload(all_errors)
+            await self._preload(all_errors)
             LOG.debug("End preload")
             # Don't log if it looks to be already preloaded.
             if (time.time() - start_time) > 1:
                 LOG.info("Do preload in %.3fs.", time.time() - start_time)
+            LOG.debug("Run garbage collection: %s", ", ".join([str(gc.collect(n)) for n in range(3)]))
             result["ogcServers"] = {}
             for ogc_server in models.DBSession.query(main.OGCServer).all():
                 nb_layers = (
@@ -1096,9 +1097,11 @@ class Theme:
                     .one()
                 )
                 if nb_layers[0] == 0:
-                    # QGIS Server langing page requires an OGC server that can't be used here.
+                    # QGIS Server landing page requires an OGC server that can't be used here.
                     continue
 
+                LOG.debug("Process OGC server '%s'", ogc_server.name)
+
                 url_internal_wfs, url, url_wfs = self.get_url_internal_wfs(ogc_server, all_errors)
 
                 attributes = None
@@ -1110,7 +1113,7 @@ class Theme:
                     )
                 if ogc_server.wfs_support and url_internal_wfs:
                     attributes, namespace, errors = await self._get_features_attributes(
-                        url_internal_wfs, ogc_server.name
+                        url_internal_wfs, ogc_server
                     )
                     # Create a local copy (don't modify the cache)
                     if attributes is not None:
@@ -1209,3 +1212,34 @@ class Theme:
                     f"{', '.join([i[0] for i in models.DBSession.query(main.LayerGroup.name).all()])}"
                 },
             )
+
+    @view_config(route_name="ogc_server_clear_cache", renderer="json")  # type: ignore
+    def ogc_server_clear_cache_view(self) -> Dict[str, Any]:
+        self._ogc_server_clear_cache(
+            models.DBSession.query(main.OGCServer).filter_by(id=self.request.matchdict.get("id")).one()
+        )
+        came_from = self.request.params.get("came_from")
+        if came_from:
+            raise pyramid.httpexceptions.HTTPFound(location=came_from)
+        return {"success": True}
+
+    def _ogc_server_clear_cache(self, ogc_server: main.OGCServer) -> None:
+        errors: Set[str] = set()
+        url_internal_wfs, _, _ = self.get_url_internal_wfs(ogc_server, errors)
+        if errors:
+            LOG.error(
+                "Error while getting the URL of the OGC Server %s:\n%s", ogc_server.id, "\n".join(errors)
+            )
+            return
+        if url_internal_wfs is None:
+            return
+
+        asyncio.run(self._async_cache_invalidate_ogc_server_cb(ogc_server, url_internal_wfs))
+
+    async def _async_cache_invalidate_ogc_server_cb(
+        self, ogc_server: main.OGCServer, url_internal_wfs: Url
+    ) -> None:
+        # Fill the cache
+        await self.preload_ogc_server(ogc_server, url_internal_wfs, False)
+
+        cache_invalidate_cb()