topic Re: Tokens and Reverse Proxy in ArcGIS API for Flex Questions

Tokens and Reverse Proxy

Drew — Wed, 11 May 2011 01:26:56 GMT

Does anyone have any experience using secured services through a reverse proxy?

I am having issues authenticating a token once the application passes through the reverse proxy.
I am able to get it working on the host machine.

I am using an older version of the Flex Viewer (1.3) - no my choice - So I have configured the token to be passed using the proxy.ashx file.
I am using Apache mod_proxy and AGS 9.3.1 - (not my choice)

Any tips would be appreciated generating the token to work through a reverse proxy.

Is there a way to generate a token that can be authenticated from any IP, or web application or do they all have to be created specifically for each app URL.

Drew

Re: Tokens and Reverse Proxy

HaroldBostic — Wed, 11 May 2011 02:58:51 GMT

Hello, if you are referencing the proxy page proxy.ashx then you will want to use the IP address option on the get token page http(s)://[webserver]/ArcGISInstance/tokens/gettoken.html

From there ***warning I am not a network guy***

I had ping'd my outside domain and got back the internal ip address of my outside domain, and that is the ip I had to use in order to create my token

Meaning, I had to use the ip address I get when connected to my network, versus the ip I get when ping'ing my url for a computer not on my network

What are you using to generate your token? Are you not using the token page?

Re: Tokens and Reverse Proxy

DrewDowling — Thu, 12 May 2011 17:55:54 GMT

I am not familiar with the proxy.ashx file. Where is it located?

I had issue setting this up using the tokens/gettoken.html page.

My issue was I didn't have url rewiting set up properly on the web server for arcgis/tokens*. There was also something about about specifying https:// as well as http:// in the rule.