Good morning. I am implementing a proxy to my application so that the user does not have to enter login/password every time he wants to enter the application. I have the application downloaded and implemented on my local server. I have checked that the webmap is shared with the Organization as well as the layers it has published. I am using Xammp's Apache server and the proxy chosen was the PHP version offered by ESRI. GitHub - Esri/resource-proxy: Proxy files for DotNet, Java and PHP. First I configured the proxy.config: xml version = "1.0" encoding = "utf-8" ?> ProxyConfig allowedReferers = "*" logFile = "proxy_log.log" mustMatch = "true" > serverUrls > serverUrl url = "https : //MY_ORGANIZATION.maps.arcgis.com/" username = "USER" password = "PASSWORD" matchAll = "true" / > serverUrl url = "http : //services.arcgisonline.com" matchAll = "true" / > serverUrls > ProxyConfig > Second I configured the config.json: "wabVersion" : "2.12" , "isWebTier" : false , "httpProxy" : { "useProxy" : true , "alwaysUseProxy" : false , "url" : "PHP/proxy.php?" , "rules" : [ { "urlPrefix" : "http://MY_ORGANIZATION.maps.arcgis.com/" , "proxyUrl" : "PHP/proxy.php?" } ] The application loads correctly without asking for username/password. However it does not load the features. Access to XMLHttpRequest at 'https://static.arcgis.com/attribution/World_Imagery?f=json' from origin 'http://localhost' has been blocked by CORS policy : The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request 's credentials mode is ' include' . The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute . Access to XMLHttpRequest at 'https://services9.arcgis.com/YJdM1D4Nb7rZFsXe/arcgis/rest/services/Viviendas/FeatureServer/0?f=json' from origin 'http://localhost' has been blocked by CORS policy : The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request 's credentials mode is ' include' . The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute . Services that are not displayed return an error of the type: { "error" : { "code" : 499 , "message" : "Token Required" , "messageCode" : "GWM_0003" , "details" : [ "Token Required" ] } } I don't know if the mistake can come from: 1) I haven't introduced any service in the "proxy.config" so that it passes with the proxy and the features are displayed. 2) When entering username/password I have to change another parameter that I don't know what it can be. Any idea? Thank you very much in advance

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Enter the Application without username and password

AlbertoCañivano1

Good morning.
I am implementing a proxy to my application so that the user does not have to enter login/password every time he wants to enter the application.
I have the application downloaded and implemented on my local server.
I have checked that the webmap is shared with the Organization as well as the layers it has published.

I am using Xammp's Apache server and the proxy chosen was the PHP version offered by ESRI.

GitHub - Esri/resource-proxy: Proxy files for DotNet, Java and PHP.

First I configured the proxy.config:

<SPAN class="php token"><SPAN class="delimiter token"><?</SPAN>xml version<SPAN class="operator token">=</SPAN><SPAN class="string token">"1.0"</SPAN> encoding<SPAN class="operator token">=</SPAN><SPAN class="string token">"utf-8"</SPAN> <SPAN class="delimiter token">?></SPAN></SPAN>
<SPAN class="operator token"><</SPAN>ProxyConfig allowedReferers<SPAN class="operator token">=</SPAN><SPAN class="string token">"*"</SPAN>
             logFile<SPAN class="operator token">=</SPAN><SPAN class="string token">"proxy_log.log"</SPAN>
             mustMatch<SPAN class="operator token">=</SPAN><SPAN class="string token">"true"</SPAN><SPAN class="operator token">></SPAN>
    <SPAN class="markup token"><SPAN class="token tag"><SPAN class="token tag"><SPAN class="punctuation token"><</SPAN>serverUrls</SPAN><SPAN class="punctuation token">></SPAN></SPAN></SPAN>
    	<SPAN class="operator token"><</SPAN>serverUrl url<SPAN class="operator token">=</SPAN>"https<SPAN class="punctuation token">:</SPAN><SPAN class="comment token">//MY_ORGANIZATION.maps.arcgis.com/"  </SPAN>
                   username<SPAN class="operator token">=</SPAN><SPAN class="string token">"USER"</SPAN>  
                   password<SPAN class="operator token">=</SPAN><SPAN class="string token">"PASSWORD"</SPAN>
                   matchAll<SPAN class="operator token">=</SPAN><SPAN class="string token">"true"</SPAN><SPAN class="operator token">/</SPAN><SPAN class="operator token">></SPAN>

        <SPAN class="operator token"><</SPAN>serverUrl url<SPAN class="operator token">=</SPAN>"http<SPAN class="punctuation token">:</SPAN><SPAN class="comment token">//services.arcgisonline.com"  </SPAN>
                   matchAll<SPAN class="operator token">=</SPAN><SPAN class="string token">"true"</SPAN><SPAN class="operator token">/</SPAN><SPAN class="operator token">></SPAN>
	
    <SPAN class="markup token"><SPAN class="token tag"><SPAN class="token tag"><SPAN class="punctuation token"></</SPAN>serverUrls</SPAN><SPAN class="punctuation token">></SPAN></SPAN></SPAN>
<SPAN class="markup token"><SPAN class="token tag"><SPAN class="token tag"><SPAN class="punctuation token"></</SPAN>ProxyConfig</SPAN><SPAN class="punctuation token">></SPAN></SPAN></SPAN>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN>

Second I configured the config.json:

<SPAN class="string token">"wabVersion"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="string token">"2.12"</SPAN><SPAN class="punctuation token">,</SPAN>
  <SPAN class="string token">"isWebTier"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="keyword token">false</SPAN><SPAN class="punctuation token">,</SPAN>
  <SPAN class="string token">"httpProxy"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="punctuation token">{</SPAN>
    <SPAN class="string token">"useProxy"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="keyword token">true</SPAN><SPAN class="punctuation token">,</SPAN>
    <SPAN class="string token">"alwaysUseProxy"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="keyword token">false</SPAN><SPAN class="punctuation token">,</SPAN>
    <SPAN class="string token">"url"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="string token">"PHP/proxy.php?"</SPAN><SPAN class="punctuation token">,</SPAN>
    <SPAN class="string token">"rules"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="punctuation token">[</SPAN><SPAN class="punctuation token">{</SPAN>  
        <SPAN class="string token">"urlPrefix"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="string token">"http://MY_ORGANIZATION.maps.arcgis.com/"</SPAN><SPAN class="punctuation token">,</SPAN>  
        <SPAN class="string token">"proxyUrl"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="string token">"PHP/proxy.php?"</SPAN>  
    <SPAN class="punctuation token">}</SPAN><SPAN class="punctuation token">]</SPAN>‍‍‍‍‍‍‍‍‍‍<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN>

The application loads correctly without asking for username/password.
However it does not load the features.

Access to XMLHttpRequest at <SPAN class="string token">'https://static.arcgis.com/attribution/World_Imagery?f=json'</SPAN> <SPAN class="keyword token">from</SPAN> origin <SPAN class="string token">'http://localhost'</SPAN> has been blocked by CORS policy<SPAN class="punctuation token">:</SPAN> The value <SPAN class="keyword token">of</SPAN> the <SPAN class="string token">'Access-Control-Allow-Origin'</SPAN> header <SPAN class="keyword token">in</SPAN> the response must not be the wildcard <SPAN class="string token">'*'</SPAN> when the request<SPAN class="string token">'s credentials mode is '</SPAN>include'<SPAN class="punctuation token">.</SPAN> The credentials mode <SPAN class="keyword token">of</SPAN> requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute<SPAN class="punctuation token">.</SPAN><SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN>

Access to XMLHttpRequest at <SPAN class="string token">'https://services9.arcgis.com/YJdM1D4Nb7rZFsXe/arcgis/rest/services/Viviendas/FeatureServer/0?f=json'</SPAN> <SPAN class="keyword token">from</SPAN> origin <SPAN class="string token">'http://localhost'</SPAN> has been blocked by CORS policy<SPAN class="punctuation token">:</SPAN> The value <SPAN class="keyword token">of</SPAN> the <SPAN class="string token">'Access-Control-Allow-Origin'</SPAN> header <SPAN class="keyword token">in</SPAN> the response must not be the wildcard <SPAN class="string token">'*'</SPAN> when the request<SPAN class="string token">'s credentials mode is '</SPAN>include'<SPAN class="punctuation token">.</SPAN> The credentials mode <SPAN class="keyword token">of</SPAN> requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute<SPAN class="punctuation token">.</SPAN>‍<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN>

Services that are not displayed return an error of the type:

<SPAN class="punctuation token">{</SPAN><SPAN class="string token">"error"</SPAN><SPAN class="punctuation token">:</SPAN><SPAN class="punctuation token">{</SPAN><SPAN class="string token">"code"</SPAN><SPAN class="punctuation token">:</SPAN><SPAN class="number token">499</SPAN><SPAN class="punctuation token">,</SPAN><SPAN class="string token">"message"</SPAN><SPAN class="punctuation token">:</SPAN><SPAN class="string token">"Token Required"</SPAN><SPAN class="punctuation token">,</SPAN><SPAN class="string token">"messageCode"</SPAN><SPAN class="punctuation token">:</SPAN><SPAN class="string token">"GWM_0003"</SPAN><SPAN class="punctuation token">,</SPAN><SPAN class="string token">"details"</SPAN><SPAN class="punctuation token">:</SPAN><SPAN class="punctuation token">[</SPAN><SPAN class="string token">"Token Required"</SPAN><SPAN class="punctuation token">]</SPAN><SPAN class="punctuation token">}</SPAN><SPAN class="punctuation token">}</SPAN><SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN>

I don't know if the mistake can come from:
1) I haven't introduced any service in the "proxy.config" so that it passes with the proxy and the features are displayed.
2) When entering username/password I have to change another parameter that I don't know what it can be.

Any idea? Thank you very much in advance

Find more posts tagged with

Accepted answers

All comments

RobertScheitlin__GISP

Alberto,

Do you think it would go faster if instead of publishing the entities in different services as I have it (there are 15 features) would go faster if I only publish a service with all features?

That could work. I have never used the php proxy so I am not sure about any speed difference.

AlbertoCañivano

Robert.

Just to close the post.
Do you think it would go faster if instead of publishing the entities in different services as I have it (there are 15 features) would go faster if I only publish a service with all features?
What if I use another proxy like .Net? Could I get better performance? Right now I have PHP proxy working.
Thank you.
P.S. I don't know how to close the post, the answer you gave me is good for me and correct.

AlbertoCañivano

I've been reading documentation and testing the oAuth protocol, but I don't think it's worth it. Thank you for your help Robert.

RobertScheitlin__GISP

Alberto,

The proxy is the only route I have used. You could search GeoNet for enabling WAB with oAuth.

AlbertoCañivano

Robert.

And do you know some way I could implement in my application in which: the user is signed in only once and that session lasts a certain time. The application I have is opened by a url in which the user makes filters and visualizes the chosen. Currently, each time you generate a new url, Arcgis Online asks for the username and password and that's what I want to avoid.
Thank you.

P.S. Sorry about the username (I am Alberto during this post), two Arcgis Online accounts have been linked and I have to configure it again.

RobertScheitlin__GISP

Daniel,

I do not experience slow response when using a proxy so I am not sure what to tell you.

DanielPérez_López

Thank you for your reply, Robert.
After setting the proxy to all features, the application is very slow, takes a long time to load and refresh when I move around the map. I see that what takes are the requests it makes for the proxy.

Do you know why this happens?

Thanks

RobertScheitlin__GISP

Daniel,

Yes by "secured" services I am taking about services that are not public. If all of the data is secured then they all will need to go through the proxy.

DanielPérez_López

Robert,

As a safe service you are referring to private entities, those that are not public? all the entities in my viewer are private, only shared with my organization, so, if I understand it well, all would have to go through the proxy so it would be very slow to work with the viewer.

My goal is that you can enter the viewer from another website (redirecting the user through a url), users who enter are authorized in their application and use my application as a viewer to consult data, would make many requests and is annoying for them to be entering user / password every time they make queries to my viewer.

AlbertoCañivano

Yeah, it's in the same place.

I have managed to load the features; putting in the proxy.config the services that were giving me problems "https://static.arcgis.com" and "https://services9.arcgis.com".
Then I have configured them in config.json under "rules".
I know I'm doing something wrong because all the features are displayed (my webmap has 15) but it's very slow to refresh because it's doing the queries from the proxy to Arcgis online, instead of just to Arcgis online.

RobertScheitlin__GISP

Alberto,

Is your proxy and web app on the same server?

AlbertoCañivano1

Good morning, Robert. Thank you for your reply.

I have tried to call the application with the machine name and the IP of the equipment; it still gives the same message but instead of "http://localhost" appears the address I'm looking for, in addition to the token error required for each layer

according to the DevOps of Chrome

De: Robert Scheitlin, GISP <geonet@esri.com>

Enviado el: miércoles, 20 de noviembre de 2019 19:54

Para: Alberto Cañivano Moreno <acanivanom@boslan.com>

Asunto: Re: - Re: Enter the Application without username and password

GeoNet, The Esri Community | GIS and Geospatial Professional Community <https://community.esri.com/?et=watches.email.thread>

Re: Enter the Application without username and password

reply from Robert Scheitlin, GISP<https://community.esri.com/people/rscheitlin?et=watches.email.thread> in Web AppBuilder for ArcGIS - View the full discussion<https://community.esri.com/message/892411-re-enter-the-application-without-username-and-password?commentID=892411&et=watches.email.thread#comment-892411>

RobertScheitlin__GISP

Alberto,

The issue is that you are attempting to test the app using the localhost url. Once a proxy is involved and you are testing you need to no longer use the localhost url and instead use the actual machine name url.

Join the Conversation

Signed in members can post, follow updates, and more. New here? Register a free account.

Quick Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.