nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

ArcGIS Server tokens not working

DonaldBrown

I'm using ArcGIS Server 10.2.2 on Linux.

When I manually request a token from:

https://local_machine_name:6080/arcgis/tokens/

It works fine. When I manually request a token from (through web server):

https://webserver_domain/arcgis/tokens/

It doesn't work. I get:

Invalid request

Usage: https://webserver_domain/arcgis/tokens?request=gettoken&username=username&password=password&

Usage: https://webserver_domain/arcgis/tokens/generateToken?username=username&password=password&

Usage: https://webserver_domain/arcgis/tokens/gettoken.html

When I request manually with this URL (note the 'admin'), it works fine (this is through the web server):

https://webserver_domain/arcgis/admin/generatetoken/

So, it seems like through the REST endpoint, the 'post' is getting mangled between the web server and the GIS server?

Then, through the 'admin' endpoint, the 'post' works fine.

Any ideas?

One more question.... Why are there two ways to get a token? Is one method preferable?

Vind meer berichten getagd met

Accepted answers

All comments

VinceAngelo

Quoting the JavaScript API documentation:

The request to the token service must be made over HTTPS and all subsequent requests that use the token also need to be made over HTTPS if required by the resource.

The ArcGIS Server documentation also explains how to disable the insecure configuration that permits HTTP requests in:

Securing your ArcGIS Server site » Configuring ArcGIS Server to be secure » Disabling token acquisition through HTTP GET requests

- V

DonaldBrown

Thanks for the information. I think it's a good ideas to disable the 'get' token requests. I will probably implement that.

However, that doesn't solve my problem of getting the 'post' to work through the REST endpoint. I edited my original post to be more clear. I am using https for all requests.

DrewDowling

Donal

Did you ever get a solution to this. I've started having the same problem on a new environment I am building. token requests fail using a web adapter but work fine connecting to directly to the web server. I have set up everything to use https. and I'm not getting any errors with logging in and displaying map services, only with token generation.

DonaldBrown

Nope, I haven't been able to get this to work. So, the questions remain:

1) Why are there two places to get a token?:

https://MyDomain/arcgis/tokens/ https://webserver_domain/arcgis/tokens/

and

https://MyDomain/arcgis/admin/generatetoken

2) Why does the first one NOT work (with the above error messages), while the second URL works fine?

ElizabethNolan

Hi,

Did you ever get this to work? We are having the exact same issue. We are using an F5, no web adapter, and 3 clustered arcgis servers running 10.4. Generate token works on the local host. We just upgraded to 10.4.1 (have not been able to test if this made any difference not that we upgrade thinking it would we were having a different issue and needed to upgrade to fix it).

DianeHarshbarger

For 10.2.2 we did not have this issue. With 10.3.1, we got this error message when attempting to generate a token with HTTP Referer and Expiration filled in when manually requesting token from:

https://local_machine_name:6080/arcgis/tokens/

Invalid request

Usage: https://webserver_domain/arcgis/tokens?request=gettoken&username=username&password=password&

Usage: https://webserver_domain/arcgis/tokens/generateToken?username=username&password=password&

Usage: https://webserver_domain/arcgis/tokens/gettoken.html

ESRI support said:

Credentials are needed in 10.3.1 to generate the token. The id and pw should be your primary site administrator account.
Also, in GeoEvent Processor - Site > Data Stores, when trying to register your new token, you may need to provide the URL: in FQDN format. Note: We only provide the machine name without the domain and it worked fine.
And as others have said ESRI support also said this error message can be due to webadapter issue.

StefanUseldinger

I solved this issue by setting the correct Content-Type in den HTTP Request Header.

Doe mee aan het gesprek

Aangemelde leden kunnen berichten plaatsen, updates volgen en meer. Nieuw hier? Registreer een gratis account.

Snelle Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.