nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Putting a login screen onto sample flex viewer?

grahamcooke

Has anyone successfully put a login system "in front" of the sample flex viewer? Can this be done using states in flex? If anyone can help me out I'd be most grateful!!

Find more posts tagged with

Accepted answers

All comments

grahamcooke

I embedded the flex app in an asp.net page, and had the users log in via a .NET website application using asp role/membership functionality.

i did not do any of the login functionality in flex, i stayed with the .NET wrapper idea.

DanielOchoa

so login.swf is a separate app that i create in flex?

Did you wind up implimenting this flash login code as a swf, or did you go in a different direction?

Thanks

GiosiaPoma

Thank you for the answer. I've solved my problem yesterday.

All works, I've understand that roles with groups of users stored in active diretory doesn't work. I think that nested group aren't recognized.

I generate on the fly my token, I made the authentication with a php script called by a flash form.

Now the next step is to integrate what done in the sample flex viewer and I think that the solution is in the map manager.

thank you

??? It's normal that I don't receive a notification of your forum reply? I've set to alert me instantly...

seanlo

1) LoginMainApp does a HTTPService connect to the rest services.
2) I am currently running mine on java.

If you're simply generating a Long-lived token to access the services, attaching it to the config.xml will work.
If you're retrieving a short-lived token on the fly to access the services, you will need to follow the steps i mentioned above. Mapmanager.mxml HAS to be modified in order for this to work. (Assuming you are using the sample flex viewer)

GiosiaPoma

Hi Seanlo,
I'm trying to do what you have done. I've opened this thread thread.

This works with Default user and role storage system in arcgis server (in my case is java version).

I don't understand if you retrive the token on the fly and you insert the token in the services.

Now my problem is when I switch to Default storage to Active Directory storage, my token generation is ok but when I put the token in the services nothing returns...

What does the LoginMainApp class?

What's your arcgis server version? Java or .net?

thank for the answer,

seanlo

Well here's my code from mapmanager.mxml.

   //config
      private function config(event:AppEvent):void
      {
       configData = event.data as ConfigData;

      }
   //init
   private function init():void
   {
    SiteContainer.addEventListener(AppEvent.CONFIG_LOADED, config);

//sean's mod

          var LoginInstance:LoginMainApp=new LoginMainApp(this.width,this.height,TokenUrl,ClientId,MapLayerLocation,RestLogin,ExpirationToken);
          LoginInstance.addEventListener(Event.COMPLETE, SecurityInit);
          //apparently PopUpManager can only be called through flex. =(
    PopUpManager.addPopUp(LoginInstance.LoginPop,this,true);
    PopUpManager.centerPopUp(LoginInstance.LoginPop);
    //LoginInstance.SetLoginPositions();

    //Alert.show("Starting");
//sean's mod
   }

Where LoginInstance is my custom actionscript login file that i wrote. Once it completes verification with the rest service, it returns a custom event Event.COMPLETE back to SecurityInit.
Here is SecurityInit()

   private function SecurityInit(e:Event):void
   {
   //sean try mod

    Alert.show("Starting");
    SiteContainer.addEventListener(AppEvent.SET_MAP_NAVIGATION, changeNavigationbyMenu);
                SiteContainer.addEventListener(AppEvent.BASEMAP_MENU_CLICKED, basemapMenuClicked);
    //SiteContainer.addEventListener(AppEvent.SET_MAP_NAVIGATION, changeNavigationbyWidget);
    SiteContainer.addEventListener(AppEvent.SET_MAP_ACTION, enableMapAction);
    SiteContainer.addEventListener(AppEvent.SHOW_INFOWINDOW, widgetShowInfo);
   //sean try mod
       map = new Map();
       map.id = "map";
       map.zoomSliderVisible = false;
       map.addEventListener(MapEvent.LOAD, mapLoadComplete);
       this.addChild(map);
          SiteContainer.dispatchEvent(new AppEvent(AppEvent.MAP_LOADED, false, false, map));

and so on.....

The key changes for this code are the SiteContainer.addEventListener. They must be taken FROM the original init, and placed to fire AFTER verification has been done successfully.

Let me know if you need more code. ^_^

ctalleygreenville

Ohhhh. I will take a look at working with MapManager vs. the widget. This app is using the SFV code.
Thanks for the tip.

Carmen

When you say the short lived token doesn't work, are you referring to the SFV or your own application?

If you are referring to the SFV, there are certain events which must only fire AFTER the http token is obtained. All my modifications are done in Mapmanager.mxml.

seanlo

When you say the short lived token doesn't work, are you referring to the SFV or your own application?

If you are referring to the SFV, there are certain events which must only fire AFTER the http token is obtained. All my modifications are done in Mapmanager.mxml.

ctalleygreenville

Sean,

You have succeeded in doing what I was TRYING to do a while back but never succeeded - which is your 1st scenario above. I wanted to get a short lived token on the fly. I was using HttpService within a LivelayerWidget's .mxml . My url in the code for the request works fine when I copy and paste into IE. It returns a token. I could then hard code the returned token in the .xml and it would work. But running it through the code, would not work. The url is of this format:
https://myservername/arcgis/tokens?request=gettoken&username=myuname&password=mypwd&clientid=ip.999.99.99.99&expiration=1440

I keep getting this error or similar: [RPC Fault faultString="HTTP request error" faultCode="Server.Error.Request" faultDetail="Error: [IOErrorEvent type="ioError" bubbles=false cancelable=false eventPhase=2 text="Error #2032"].

I had to put the "request token on fly" on hold in order to just get the project working and have not gotten back to it.

So, I am just hardcoding a longlived token into the .xml for now. Since we are using https for the application, I am *hoping* that is keeping the token from being transmitted as clear text.

If you have any advice, pass it along.

seanlo

Hey Carmen,

When you say: "Once you copy the app to the actual server, then you must replace the token in the .xml with a new one."
Are you doing a long lived token? Just out of curiosity. 🙂

I have successfully tried the following methods in the SFV:

1) HTTPservice the token url, login, and obtain a short lived token. Use that token to access services.

Or

2) Login to the rest admin via HTTPservice. This grants my application access to the rest services.

ctalleygreenville

Sean,
Sorry for the delayed reply. Since the forums don't seem to email me anymore when there are replies, I don't think to look all the time.

I am using both secured and non-secured services within the Sample Flex Viewer. Although, we have customized the original download quite a bit. But that SFV code was our base.

In the LiveLayerWidget.xml for that layer, here is a sample of what should be in the Layer tag (we are using https, you may not be):
<layer>https://yourserver/ArcGIS/rest/services/yourSecuredServicesFolderName/yourSecureServiceName/MapServer/0?token=copyandpasteyourtokenhere</layer>
(where 0 is the layer ID we are using. Substitute whatever the ID is for your secure layer)

If you are editing the SFV in FlexBuilder on your PC and testing there, then you have to request a token using the IP address of your PC (vs. web app url).

Once you copy the app to the actual server, then you must replace the token in the .xml with a new one. You will have to request the token using the WebApplication URL which must be the server and app name. When I requested the token, I had to use:
https://myservername/myAppName

I think getting the token right depending on where I was working was the most confusing at the time.

Hope this helps.

Carmen

ctalleygreenville,

When you say you use secured map services for the flex app.. do you mean the sample flex viewer or your own flex app?

I have not been able to figure out how to use secured services for the SFV since i've been tackling it. I have already created my own flex app to handle secured services/multi-tiered users, but the SFV = no go for me when it comes to security.. please do share with us how you did it. 🙂

Sean

seanlo

Yarrr. I finally got that secured service to work with the sample flex viewer. Too late to implement it for the current project though.. ah well, cest la vie.

At least i'll be able to do it easily for the next few projects. =D

seanlo

ctalleygreenville,

When you say you use secured map services for the flex app.. do you mean the sample flex viewer or your own flex app?

I have not been able to figure out how to use secured services for the SFV since i've been tackling it. I have already created my own flex app to handle secured services/multi-tiered users, but the SFV = no go for me when it comes to security.. please do share with us how you did it. 🙂

Sean

ctalleygreenville

This is exactly what we did with our Flex App - used .net "wrapper" with a login page and asp.net database for users and roles. I copied what is normally in the index.html from FlexViewer into an .aspx that the login page redirects to.

Then to totally secure the entire directory (so a person couldn't access any .swfs directly), I applied the "Wild Card Mapping" as cgishack mentioned above. We also use a mix of secured and non-secured Map Services. Seems to work well.

Carmen

grahamcooke

That's the only secure way to go. Using Flex as your login screen / validation could be very dangerous from a security stand point.

I would still look at locking down the entire DIR some how to protect direct access to the .swf file through a URL.

Drew

thanks, I think I'm decided on this approach! As for locking down the page that hosts the swf, I can do this with the role membership provider by placing the page that hosts the swf in a folder that is restricted only to people who have logged in successfully.

cheers.

Drew

That's the only secure way to go. Using Flex as your login screen / validation could be very dangerous from a security stand point.

I would still look at locking down the entire DIR some how to protect direct access to the .swf file through a URL.

Drew

grahamcooke

OK i've been thinking some more about this and was wondering if this might be the right way to go:

As the app is fairly complex and there would be an admin screen for our helpdesk people to do user related studd like unlock/change password/create new user etc... would it be a good idea to create a .NET website and use the membership provider to handle all the user related stuff. All validation could be done in ASP.NET and then on successful login i could redirect to an asp.net that "hosts" the flex app?

Is this a horrible idea or something that is workable? .net is much more in my comfort zone to be honest. Obviously all the mapping functionality etc will HAVE to be done in flex and that's fine, I want to learn but it seems that with all the built in functionality .NET has for handling users / roles etc then this could be the way to go?

Would appreciate some expert advice on this please!

grahamcooke

Depending on your audience you might want to just use IIS and Windows Authentication and protect the entire directory.

You will have to map all the files to go through C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll but that can easily be done using 'wild card application maps' in IIS.

That's how I do it for a lot of internal applications.

Drew

this would have been ideal, but some of the users of our system will be people who are using pc's connected to our network but they will NOT have active directory accounts. We need to create separate dbtables to hold their login credentials and then depending what area of the UK they are "allocated" to, load a combo box with training areas to choose from to create their base map data.

grahamcooke

Yeah just use PopUpManager like so:

LoginPop = new Panel();
         LoginPop.title="Please Login";
            LoginPop.width=600;
         LoginPop.height=500;
LoginPop.addChild(LoginModule);
LoginModule.loadModule("Login.swf");
            PopUpManager.addPopUp(LoginPop,this,true);
PopUpManager.centerPopUp(LoginPop);

Dump it in the application from the function: creationComplete = "LoginVerify()"
Whereby LoginVerify() is the code above.

Of course.. if you actually want it to use the token service or login screen that's a different step.

so login.swf is a separate app that i create in flex?

Drew

Depending on your audience you might want to just use IIS and Windows Authentication and protect the entire directory.

You will have to map all the files to go through C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll but that can easily be done using 'wild card application maps' in IIS.

That's how I do it for a lot of internal applications.

Drew

seanlo

Yeah just use PopUpManager like so:

LoginPop = new Panel();
         LoginPop.title="Please Login";
            LoginPop.width=600;
         LoginPop.height=500;
LoginPop.addChild(LoginModule);
LoginModule.loadModule("Login.swf");
            PopUpManager.addPopUp(LoginPop,this,true);
PopUpManager.centerPopUp(LoginPop);

Dump it in the application from the function: creationComplete = "LoginVerify()"
Whereby LoginVerify() is the code above.

Of course.. if you actually want it to use the token service or login screen that's a different step.

grahamcooke

Thanks. Any code samples anywhere for this please? I'm really struggling to get my head round flex at the moment (coming from a .net background)

rscheitlin

gcooke76,

Sure look here at this thread.

http://forums.arcgis.com/threads/3505-Login-Page-The-connect-to-LDAP

Join the Conversation

Signed in members can post, follow updates, and more. New here? Register a free account.

Quick Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.