topic Re: http vs https in ArcGIS JavaScript Maps SDK Questions

http vs https

cadgism — Thu, 09 Nov 2017 11:16:51 GMT

Hi..

I have a .net web application (main) calling another arcgis java script web application (map_app) and embed it inside the main application.

Everything was working fine until we made little change as follows :-

The main application is changed to - https - from http. The map_app & the map services are still in http. After these changes map_app is not working at all.

Any help would be gratefully appreciated .

Thank you

Re: http vs https

RobertScheitlin__GISP — Thu, 09 Nov 2017 14:38:30 GMT

CADGIS,

The proper way to fix this is to update your JS API code to use https urls. Using mixed content is always going to be an issue.

You may running into the issue addressed here:

Supporting Multiple IIS Site Bindings | Microsoft Docs

Re: http vs https

rgomes — Fri, 10 Nov 2017 11:02:12 GMT

Mixed contents inside the same application are not supported. Just change all of the contents for the application to work using HTTPS, including the API references. If you don't know all the places where to change make a Find/Replace in your projects or try to use a kind of URL Rewriter.

Re: http vs https

cadgism — Sun, 12 Nov 2017 07:18:54 GMT

Thank You Rafael Gomes..

Can you explain little more please..

The main application is https. The map_app is embedded inside the main application as iframe. The map_app application access many services from more than one arcgis server. All these services are published as http services.

if i understand you right, you are suggesting to re-publish all the services in https ?.

Re: http vs https

rgomes — Mon, 13 Nov 2017 13:31:28 GMT

I think you do not need to republish. But you can enabled binding HTTP and HTTPS to the services.
If you permit any procotol (HTTP and HTTPS) just need to configure all the references inside your main application to use just HTTPS requests.
With this any other application or arcgis server continue to permit the use of HTTP.

The mixed content is prohibited just for each independent application. In other words you can provide one or more HTTP application and one or more independent HTTPS application, using the same services if the protocol are enable. You just can't do the access inside the same main application using diferent protocols.