nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

@Robert's 2009 post token security

SaugatJoshi

Hi Robert,

Is there a way I can change this to flex viewer 2.3.1. I am looking for something like you mentioned in your post http://forums.esri.com/Thread.asp?c=158&f=2421&t=280353

What I have done ..
1.Removed token tag from config.xml completely.
2. Received token from the Arcgis server in init() function of Mapmanager.mxml using httpservice.
3. Used it in the case "dynamic": of mapmanager.mxml as dynlayer.token=received token.
4.On these steps I cannot see the mapservice in the first place. When I refresh, I see the service working (through Fiddler), also in TOC, but cannot see the map. Again does not work for any other browser than IE.

I saw your post in 2009 relating similar issue.Below is your suggestion.How can I translate this to flex viewer 2.3.1

//In the Config.xml for each secured map service add
token="x"

//In the ConfigManager.as look for the
    //================================================ 
    //map
//section and add
     var msToken:String = mapserviceList.@token;
//right above 'var msLabel:String = mapserviceList.@label;'
//then replace
     var mapservice:Object = 
     {
      label: msLabel,
      type: msType,
      visible: msVisible,
      alpha: msAlpha,
      url: msURL
     }
//with
     var mapservice:Object = 
     {
      label: msLabel,
      type: msType,
      visible: msVisible,
      alpha: msAlpha,
      url: msURL,
      token: msToken
     }

//Now in MapManger look for 'for (i = 0; i < configData.configMap.length; i++)'
//and add
           var token:String = configData.configMap.token;
//to the list of vars

//Then look for case "tiled": and add 

       if(token)
        tiledlayer.token = token;
//before 'map.addLayer(tiledlayer);'

//Then look for case "dynamic": and add 

       if(token)
        dynlayer.token = token;
//before 'map.addLayer(dynlayer);'
//That should do it.

Really appreciate your feedback.

Thank you.

Trouver plus de publications taguées avec

Accepted answers

All comments

rscheitlin

Saugat,

No, I just wanted to point out that you were adding the listener to the wrong object.

SaugatJoshi

Robert,

Thank you for the solution. However, I have a small question...since you use

ViewerContainer.getInstance().mapManager.yourpublicvar

viewerContainer.addEventListener("secTokenReceived", resultHandler)

even required in the init() function.

Thanks.

rscheitlin

Saugat,

Just create a public var in the mapManager that you can get using ViewerContainer.getInstance().mapManager.yourpublicvar.

Also why are you adding the listener to the drawTool???

drawTool.addEventListener("secTokenReceived", resultHandler);

it should be to the ViewerContainer.

SaugatJoshi

Robert, following the same problem I had...I managed it by dispatching the event only after I receive the req. info and then loading the configload() function. So, inside the result handler I have

ViewerContainer.dispatchEvent( new AppEvent("secTokenReceived",data) );
   loadConfig();

Then in the init() of mapmanger.mxml I have

ViewerContainer.addEventListener("secTokenReceived", secTokenHandler);

The token can now be seen in the switch statement.

Now, I want to receive the same information in your identify widget (Version 2.2.3f - Mar. 29, 2011) so in the init() of Identify Widget I added

drawTool.addEventListener("secTokenReceived", resultHandler);

and in the result handler

private function resultHandler(event:AppEvent):void
   {
    secToken = event.data.secToken;
    Alert.show(secToken);   
   }

However, I do not see anything in the alert.The event is already dispatched in configmanager.as. What am I missing here? To summarize I have the secToken in configManager.as(from where I dispatch the event) and I want the token in the IdentifyWidget. How can I achieve this?

Thank you.

SaugatJoshi

Hi Robert,

I believe I have the async results, however I am having still some difficulty in initialize the app. Let me describe what I have done so far.

1. I have replicated similar process above in configManager.as.
2. I have the class as below for handling async result

package com.esri.viewer.managers {
 
 import mx.rpc.http.HTTPService;
 import mx.rpc.events.ResultEvent;
 
 
 
 public class RemoteService {
  private var remoteService : HTTPService = new HTTPService();
  
  function RemoteService() : void {
   remoteService = new HTTPService();
   remoteService.url = "http://localhost:8080/docs/ttid.xml";
   //remoteService.addEventListener(ResultEvent.RESULT, handleNextResult);
  }
  
  public function callServ(callback : Function) : void {
   // the listener on the result event will call the callback with the return value
   var listener : Function = function(event : ResultEvent) : void {
    remoteService.removeEventListener(ResultEvent.RESULT, listener);
    callback(remoteService.lastResult);
   }
   
   remoteService.addEventListener(ResultEvent.RESULT, listener);
   
   // do the actual call
   remoteService.send();
  }
 }
}

3. In init() of configManager I have

            private var remoteServiceProxy : RemoteService = new RemoteService();


            //loadConfig();
remoteServiceProxy.callServ(function(result : Object): void {
   secToken=result.Project.token;
   flag="1";      
   
  });

4. I tried to use function loadConfig() if flag == 1, However everything loads twice.

    remoteServiceProxy.callServ(function(result : Object): void {
   secToken=result.Project.token;
   flag="1";
   
   if (flag=="1")
   {
    loadConfig();
   }
   
  });

5. I tried in init function to put loadconfig() inside in init() function. The problem is callback function that makes everything appear twice in flex viewer.

remoteServiceProxy.callServ(function(result : Object): void {
   secToken=result.Project.token;
   loadConfig();     
   
  });

6.When I use

Alert.show(secToken);

in loadConfig(), I can see the token twice.

I am kind of stuck here. It would be great if you could hint me on something. How should I proceed after I have async results back from server?

SaugatJoshi

Thanks Robert,

Let me get started with this. Thank you again.

rscheitlin

Saugat,

That is a good thought. It might work. I am just unsure that you can guarantee the async result will be back in time in every circumstance (i.e. heavy network traffic load).

SaugatJoshi

Thanks Robert,

This explains a lot of unusual behavior I was seeing in the flex viewer. I also had some extent values that would only work after refresh.I think, I will start looking into that direction. One question, what if I replicate this process of tokens and other initialization values directly in ConfigManager.as...can this be a work around?

Thanks a lot.

rscheitlin

Saugat,

You have to some how ensure that your httpservice gets called and returns the async result before the layer is added to the map. This is probably not going to be easy... I would assume you are going to have to rework the MapManager a bit to check and see if the layer needs a token and if so run your little routine and after the token is gotten then add the layer to the map with the token. You have a bit of work ahead of you!

SaugatJoshi

Robert,
You are absolutely correct. For some reason the secToken is not available in the case:dynamic part of the code. It is null. What must be going wrong in here? When I refresh the browser I see the token though, also TOC is updated in refresh of browser but I still do not see the map.Thanks.

rscheitlin

Saugat,

I would bet that when you get to this code that the secToken is null still.

case "dynamic":
                    {   
                        
   var dynLayer:ArcGISDynamicMapServiceLayer = new ArcGISDynamicMapServiceLayer(url,null,secToken);
                      dynLayer.id = label;
                        dynLayer.name = label;
//I tried uncommenting the line blow and removed token parameter from from function above, all i get is similar result

                        //dynLayer.token = secToken;


                        dynLayer.visible = visible;
                        dynLayer.useMapTime = useMapTime;
                        dynLayer.imageFormat="png24";
                        defQuery = new Array();

Try to put an alert in there and see.

SaugatJoshi

Yes Robert,

I make a httpservice call to a jsp page, which returns me with a xml as follows:

<Project>
  <tittle>DRAFT map</tittle> 
  <type>EALP</type> 
  <id>103371,101400</id> 
   <ip>192.168.*.*</ip> 
  <token>V1duPcHY9JIdfdfdfwqiakdtef,lfAqqw4OGhuWi774rySvM</token> 
  </Project>

I take the token and recive it successsfully in mapmanager.xml as

public function resultHandler1(event:ResultEvent):void {
    
    title=(event.result.Project.tittle.toString());            
    type=new String();
    type=(event.result.Project.type.toString());               
    id=new String();
    id=(event.result.Project.id.toString());         //id associated with  project
  
    
    Alert.show(id + type);
    idArr=ttidProj.split(",");
    idArrLen=ttidArr.length;
    
    secToken = new String();
    secToken=(event.result.Project.token.toString());
    Alert.show(secToken);

Then in case dynamic I call dynlayer as

case "dynamic":
                    {   
      
   var dynLayer:ArcGISDynamicMapServiceLayer = new ArcGISDynamicMapServiceLayer(url,null,secToken);
                      dynLayer.id = label;
                        dynLayer.name = label;
//I tried uncommenting the line blow and removed token parameter from from function above, all i get is similar result

                        //dynLayer.token = secToken;


                        dynLayer.visible = visible;
                        dynLayer.useMapTime = useMapTime;
      dynLayer.imageFormat="png24";
      defQuery = new Array();

When I use the token direcly in the config file it works fine. I am not able to figure out where I am going wrong.

rscheitlin

Saugat,

That post was for back in the days when you could not have the token in the config.xml as it is now. I don't think it has any application to what you are doing. Have you checked to see what the token you are receiving looks like using a trace or alert?

Rejoindre la conversation

Les membres connectés peuvent publier, suivre les mises à jour, et plus encore. Nouveau ici ? Inscrivez-vous gratuitement.

Liens rapides

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.