nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

tokens, proxy, secure services and the vanishing help

AdrianMarsden

Ok

I decided (why I don't know) to have yet another go at securing my services (about the tenth attempt I think)

First off, the help that was in the 9.x versions (http://resources.esri.com/help/9.3/arcgisserver/apis/javascript/ve/help/Working with ArcGIS Server services/ProxyPage.htm) seems to have vanished from the 10.2 help. I cannot see any mention of "proxy.ashx" anywhere in the Help.

Secondly, I have a proxy page, it works, I can see the requests in Fiddler going via it. However even though I have the token="jhkjghkjhkjhkjhkjhkjh" bit, it isn't passing this token.

Next, which leads me to believe it is all different in 10.2.1, despite the service being secured, and despite not seeing the token in Fiddler, and despite the logs saying it is using anonymous access, maps ARE displayed in my app. It fails when I try an Id, find or query task.

I simply want a secure service and the API to pass the credentials, yet every time I try I end up bashing my head on brick walls.

Giving up for now

ACM

Najděte více příspěvků označených jako

Accepted answers

khutchins

Adrian,

Are you using the new proxy files available on github?

https://github.com/Esri/resource-proxy

We have a .NET, Java and PHP version and each includes a read-me file with instructions for setup.

All comments

AlexeiB

I don't mean to revive what appears to be a solved problem, but I am experiencing perhaps a similar issue.

HTTPS and Proxy

I was wondering if you had experienced any similar behavior when you had your issue?

Thanks,

Alex

AdrianMarsden

Ah - answered my last question myself - I needed to wrap it in a esri.request.

   var requestHandle = esri.request({
                url:mapservice2 + "/" + layer.id + "?f=json",               
                handleAs: "json",
                load: function (data) {
                    console.debug(data)
                    LayerDescriptions[layer.id] = data.description;
                   dynamicMapServiceLayer.layerInfos[layer.id].copyrightText = data.copyrightText;
                    
                },               
            }, { useProxy: true });

AdrianMarsden

OK - I've had some spare time and found the issue.

I use this code

        //return the layer descriptions and © text into arrays - we use this later for the info dialog to generate hyperlinks and © text
        dojo.forEach(dynamicMapServiceLayer.layerInfos, function (layer) {
            var restAPIServicePage = {
                url: mapservice2 + "/" + layer.id +
                    "?f=json&token=uO3JarsebollockswxI9ExjTj_VE5IgAHr9YKPjoE3Mn00qipj9Baxjg1s0lm1c4c", callbackParamName: "callback", load: function (data) {
  LayerDescriptions[layer.id] = data.description;                    
                    dynamicMapServiceLayer.layerInfos[layer.id].copyrightText = data.copyrightText;                  
                }
            };
            dojo.io.script.get(restAPIServicePage);
        });

in my init function, to step throughmy layers and return the description into an array, which I use for layer specific hyperlinks in my ID task results.

As you see, I've had to hard code a token here as it appears to be this bit that doesn't go via the proxy, so fails to return anything

Is this the only realistic way of doing it?

Cheers

ACM

BjornSvensson

what is the lowest version of the API that the new proxy will work on? I have some code stuck at 3.0, which onlyu seems to pass the initial requests in - query tasks go direct to server.

The resource proxy should work fine with all versions the Javascript API. Assuming there isn't an API bug related to using proxies in general for specific scenarios.

AdrianMarsden

OK - digging further. I pasted the proxy request the ID task fires off directly into a browser and got back

{error: {code: Forbidden,message:"Proxy is being used from an unsupported referer: "}}

Which seems to be thrown by the proxy.ashx page at line 125 after failing "//check against the list of referers if they have been specified in the proxy.config"

Thoughts?

ACM

The only way I can see of making it work is to change the allowedReferers back to * - it's odd the error message code appears to indicate it should print the referer that is failing, but mine doesn't - well it does, but the content of context.Request.Headers["referer"] is an empty string, so 'allowed' stays false.

AdrianMarsden

I spoke to soon - got in this morning and what was working on Friday isn't! Again, the maps display fine, but fail to send anyhting back from ID tasks.

AdrianMarsden

Original reply marked as answered as that got most of the way there - many thanks - others marked as helpful!

For info - what is the lowest version of the API that the new proxy will work on? I have some code stuck at 3.0, which onlyu seems to pass the initial requests in - query tasks go direct to server.

ACM

AdrianMarsden

Thanks for help. I got it working on internal sites ok yesterday. Still not happy where we publish via reverse proxy to the external site but you've given me pointers. I used the stable release, then the nightly.CheersAcm

JohnGravois

hi adrian,

did you download the code from our live repo or the 0.9 'official' released version? if you downloaded the most up to date code, its possible the problem you are seeing is caused by a bug i introduced when modifying some internal logic when evaluating matches.

the live code today is a case sensitive match, so 'arcgis' in the proxy.config is not considered valid when the request is aimed at 'ArcGIS'.

we'll be fixing this very shortly.
https://github.com/Esri/resource-proxy/issues/77

khutchins

Have you tried setting the root url and setting matchAll to true. Setting matchAll to true means that all requests that start with the url you provide will be forwarded to the proxy. Setting matchAll to false means the url has to match exactly.


        <serverUrl url="http://servername/ArcGIS/rest"
                   username="username"
                   password="password",
                   matchAll= "true"
                   />

AdrianMarsden

Nope, sorry, still a fail on that with the new proxy pages.

I set it up and the page works.

My config is

<?xml version="1.0" encoding="utf-8" ?><ProxyConfig allowedReferers="*"
             mustMatch="false">
    <serverUrls>
        <serverUrl url="http://servername/ArcGIS/rest/services"
                   username="username"
                   password="password"
                   />
    </serverUrls>
</ProxyConfig>

Yet I get the login dialog when I start the webpage.

If I enter a valid username/password the map displays, but once again the ID tool fails - the client seems to get nothing back - nothing obvious in logs or error console.

Also, when I change the config to


<?xml version="1.0" encoding="utf-8" ?>
<ProxyConfig allowedReferers="http://applicationRootURL/"
             mustMatch="true">

It fails with

w3wp.exe Error: 0 : 2014-04-04 10:40:54 Proxy is being used for an unsupported service (proxy.config has mustMatch="true"):

Only the false setting will work.

Am I alone in finding this all very confusing?

ACM

UPDATE #1

Changing to

<?xml version="1.0" encoding="utf-8" ?>
<ProxyConfig allowedReferers="http://servername/"
             mustMatch="false">
    <serverUrls>
        <serverUrl url="http://servername/arcgis/rest/services/test/emap2/MapServer"
                   username="webmap"
                   password="password"
                   matchAll="true"/>
    </serverUrls>

- adding the full secured service URL and changing the matchall, seems to work - however I have several services I want to secure so adding just the root and matchall = false is the way I'd want to do it.

khutchins

The proxy page help is located here:
https://developers.arcgis.com/javascript/jshelp/ags_proxy.html

RachelWillmore_5-1775669777461.png

AdrianMarsden

Cheers, I'll try that tomorrow. Any idea if the online help will be updated?

khutchins

Připojte se k diskusi

Přihlášení členové mohou přispívat, sledovat aktualizace a další. Jste tu noví? Zaregistrujte si bezplatný účet.

Rychlé odkazy

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.