nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

ESRI JS API: IdentityManager: Store the oauth state in local-storage ?

Anonymous User

Hi, I've asked a similar question before, and also resolved it myself here:
ESRI JS API: IdentityManager: how to use localStorage

This was for the scenario, where I've used the popup: true for the OAuth2.0 authentication.

However, I'm now in the scenario where I have to use redirect to the agol's/portal's oAuth page insteas of a popup, so I have to use the popup: false.

This seem to work fine, but the problem is that user has to approve the access each time he opens the app, because the oath state is stored in session-storage in esriJSAPIOauth property, instead of local-storage. I guess this all happens as there is no presence of any 'Keep Me Signed In' or similar checkbox for the enterprise login oAuth page.

Does anyone know how can I force the IdentityManager to store the redirected oauth state into the session-storage ?

Thank you.

ESRI JS API: 4.14
AGOL/PORTAL SECURITY: Enterprise logins

Find more posts tagged with

Accepted answers

All comments

Anonymous User

Hi Harsh, well that I don't know. never worked with the webapp builder so not sure to what extent you can control the oauth process, tbh I don't think it's possible as the core of the application that runs your web application builder code handles all the oauth communication. Sorry

HarshvardhanSwami-Provista

Hi @Anonymous User ,

Greetings!

I hope you are doing well. I must have to say this solution is great and, I have a question, can we implement this for ArcGIS Online (if yes, then where can we put this code). I am asking this because I am implementing this with ArcGIS web app builder custom application and AGOL in the backend.

Any assistance you can provide would be greatly appreciated.

Thank you,

Harsh

RichardK

I only have one word for this. Awesome.

Ranga_Tolapi

Wow..! Very impressive..! 👏

Anonymous User

So as I've learned from the ESRI support this is not possible to do the enterprise logins. So time for hacking again....

If anyone is interested, I've ended up copying the session storage entry that IdentityManager genarates into the local storage after each login. This handles also agol/any portal.

It's not the neatest piece of code but serves the purpose.

changeOAuthStorage() {
  // REMOVE ANY ESRIJSAPIOAUTH entries in the session or local storages
  const key = 'esriJSAPIOAuth';
  if (window && window.sessionStorage) {
    const oauth = window.sessionStorage.getItem(key);
    if (!oauth) {
      return;
    }
    const oauthObj = JSON.parse(oauth);
    if (window.localStorage) {
      const localStorageoAuths =  window.localStorage.getItem(key);
      if (!localStorageoAuths) {
        window.localStorage.setItem(key, JSON.stringify(oauthObj));
        window.sessionStorage.removeItem(key);
        return;
      }
      const lsAuth = JSON.parse(localStorageoAuths);
      lsAuth['/'] = {...lsAuth['/'], ...oauthObj['/']};
      window.localStorage.setItem(key, JSON.stringify(lsAuth));
      window.sessionStorage.removeItem(key);
    }
  }
}

I've also noticed that IdentityManager 3.x has different inner workings to 4.x as it's not storing any serialized state into session nor the local storage. Has the capability of restoring the state even if accessing the internal portal externally via azure application proxy. 4.x cannot handle it.

Join the Conversation

Signed in members can post, follow updates, and more. New here? Register a free account.

Quick Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.