Well, I develop commercial application which exports selected rectangle of map as image. On frontend I use Leaflet (with esri-leaflet), and on backend I do simple C++ get requests to REST API export services. I mostly use arcgisonline public services like
Of course, I registered and generated the token for all API calls. But it seems like token was never used. On frontend apiKey has been never seen neither in query nor in headers. And on backend i get 498 Invalid Token when i use token={token} but receive desired image when i don't.
So, the question is Am i doing it right? Legally speaking, of course. Because the least thing i want is sue.
If it's OK, what do i need the token for?
If it's not OK, what's the proper way? Learn-gis tries to feed me with Hawaii volcanos and storytelling, but i don't need them. Neither i want 750Mb of Qt Gis just for that simple API call.
