How to hide the REST url in the web application ?

SunilPalkar

Hello All,

I have created basic web application for public using ArcGIS JSAPI 3.5/3.6 & ESRI 10.1 suit

When user views the application then with the help of view source he can view the all REST URLs  and we are getting unnecessary hits on those URLs

So is there any way to hide the REST URLs?

Any help will be great !!!

MattLane

...hide the REST URLs? ...unnecessary hits on those URLs

You really are talking about two different, although related, issues. Others have done a pretty good job of explaining already.
1. Hiding the URLS, or hiding the ArcGIS Server
2. Avoiding the unintended use of services
For #1, you can use a proxy on the server that changes the service from .../arcgis/rest/xyz/mapserver to keep people from knowing the data source URL, but if the client (browser) is requesting the data they will still see how to hit your service, so not much is accomplished.

For #2, you can secure the service with a long term token tied to the website so that people can't use it in their web applications or ArcMap desktop. However, they can still get to the data either from your site and the javascript console, or faking request headers. We think we might have people that just click identify on every feature in the map to farm the secured data 🙂

To really avoid people seeing the URLs or getting data from the service wholesale (if that is your intent), you would need to make a server-side application that requests the data server-side and then only sends them what you want them to see. They won't see where the data came from or be able to request it themselves separately. Of course a busy site will put a lot of load on the webserver.