topic Re: tokens, proxy, secure services and the vanishing help in ArcGIS JavaScript Maps SDK Questions

tokens, proxy, secure services and the vanishing help

AdrianMarsden — Wed, 02 Apr 2014 11:56:15 GMT

Ok

I decided (why I don't know) to have yet another go at securing my services (about the tenth attempt I think)

First off, the help that was in the 9.x versions (http://resources.esri.com/help/9.3/arcgisserver/apis/javascript/ve/help/Working with ArcGIS Server services/ProxyPage.htm) seems to have vanished from the 10.2 help. I cannot see any mention of "proxy.ashx" anywhere in the Help.

Secondly, I have a proxy page, it works, I can see the requests in Fiddler going via it. However even though I have the token="jhkjghkjhkjhkjhkjhkjh" bit, it isn't passing this token.

Next, which leads me to believe it is all different in 10.2.1, despite the service being secured, and despite not seeing the token in Fiddler, and despite the logs saying it is using anonymous access, maps ARE displayed in my app. It fails when I try an Id, find or query task.

I simply want a secure service and the API to pass the credentials, yet every time I try I end up bashing my head on brick walls.

Giving up for now

ACM

Re: tokens, proxy, secure services and the vanishing help

KellyHutchins — Wed, 02 Apr 2014 15:49:04 GMT

Adrian,

Are you using the new proxy files available on github?

https://github.com/Esri/resource-proxy

We have a .NET, Java and PHP version and each includes a read-me file with instructions for setup.

Re: tokens, proxy, secure services and the vanishing help

AdrianMarsden — Wed, 02 Apr 2014 18:54:01 GMT

Cheers, I'll try that tomorrow. Any idea if the online help will be updated?

Re: tokens, proxy, secure services and the vanishing help

KellyHutchins — Wed, 02 Apr 2014 19:21:34 GMT

The proxy page help is located here:
https://developers.arcgis.com/javascript/jshelp/ags_proxy.html

Re: tokens, proxy, secure services and the vanishing help

AdrianMarsden — Sat, 11 Dec 2021 10:43:52 GMT

Nope, sorry, still a fail on that with the new proxy pages.

I set it up and the page works.

My config is

<?xml version="1.0" encoding="utf-8" ?><ProxyConfig allowedReferers="*"
             mustMatch="false">
    <serverUrls>
        <serverUrl url="http://servername/ArcGIS/rest/services"
                   username="username"
                   password="password"
                   />
    </serverUrls>
</ProxyConfig>

Yet I get the login dialog when I start the webpage.

If I enter a valid username/password the map displays, but once again the ID tool fails - the client seems to get nothing back - nothing obvious in logs or error console.

Also, when I change the config to


<?xml version="1.0" encoding="utf-8" ?>
<ProxyConfig allowedReferers="http://applicationRootURL/"
             mustMatch="true">

It fails with

w3wp.exe Error: 0 : 2014-04-04 10:40:54 Proxy is being used for an unsupported service (proxy.config has mustMatch="true"):

Only the false setting will work.

Am I alone in finding this all very confusing?

ACM

UPDATE #1

Changing to

<?xml version="1.0" encoding="utf-8" ?>
<ProxyConfig allowedReferers="http://servername/"
             mustMatch="false">
    <serverUrls>
        <serverUrl url="http://servername/arcgis/rest/services/test/emap2/MapServer"
                   username="webmap"
                   password="password"
                   matchAll="true"/>
    </serverUrls>

- adding the full secured service URL and changing the matchall, seems to work - however I have several services I want to secure so adding just the root and matchall = false is the way I'd want to do it.

Re: tokens, proxy, secure services and the vanishing help

KellyHutchins — Sat, 11 Dec 2021 10:43:54 GMT

Have you tried setting the root url and setting matchAll to true. Setting matchAll to true means that all requests that start with the url you provide will be forwarded to the proxy. Setting matchAll to false means the url has to match exactly.


        <serverUrl url="http://servername/ArcGIS/rest"
                   username="username"
                   password="password",
                   matchAll= "true"
                   />

Re: tokens, proxy, secure services and the vanishing help

JohnGravois — Fri, 04 Apr 2014 21:00:52 GMT

hi adrian,

did you download the code from our live repo or the 0.9 'official' released version? if you downloaded the most up to date code, its possible the problem you are seeing is caused by a bug i introduced when modifying some internal logic when evaluating matches.

the live code today is a case sensitive match, so 'arcgis' in the proxy.config is not considered valid when the request is aimed at 'ArcGIS'.

we'll be fixing this very shortly.
https://github.com/Esri/resource-proxy/issues/77

Re: tokens, proxy, secure services and the vanishing help

AdrianMarsden — Sat, 05 Apr 2014 06:05:54 GMT

Thanks for help. I got it working on internal sites ok yesterday. Still not happy where we publish via reverse proxy to the external site but you've given me pointers. I used the stable release, then the nightly.CheersAcm

Re: tokens, proxy, secure services and the vanishing help

AdrianMarsden — Sun, 06 Apr 2014 08:01:41 GMT

Original reply marked as answered as that got most of the way there - many thanks - others marked as helpful!

For info - what is the lowest version of the API that the new proxy will work on? I have some code stuck at 3.0, which onlyu seems to pass the initial requests in - query tasks go direct to server.

ACM

Re: tokens, proxy, secure services and the vanishing help

AdrianMarsden — Mon, 07 Apr 2014 07:21:29 GMT

I spoke to soon - got in this morning and what was working on Friday isn't! Again, the maps display fine, but fail to send anyhting back from ID tasks.

Re: tokens, proxy, secure services and the vanishing help

AdrianMarsden — Tue, 08 Apr 2014 14:17:48 GMT

OK - digging further. I pasted the proxy request the ID task fires off directly into a browser and got back

{error: {code: Forbidden,message:"Proxy is being used from an unsupported referer: "}}

Which seems to be thrown by the proxy.ashx page at line 125 after failing "//check against the list of referers if they have been specified in the proxy.config"

Thoughts?

ACM

The only way I can see of making it work is to change the allowedReferers back to * - it's odd the error message code appears to indicate it should print the referer that is failing, but mine doesn't - well it does, but the content of context.Request.Headers["referer"] is an empty string, so 'allowed' stays false.

Re: tokens, proxy, secure services and the vanishing help

BjornSvensson — Thu, 10 Apr 2014 18:33:25 GMT

what is the lowest version of the API that the new proxy will work on? I have some code stuck at 3.0, which onlyu seems to pass the initial requests in - query tasks go direct to server.

The resource proxy should work fine with all versions the Javascript API. Assuming there isn't an API bug related to using proxies in general for specific scenarios.

Re: tokens, proxy, secure services and the vanishing help

AdrianMarsden — Thu, 24 Jul 2014 10:40:03 GMT

OK - I've had some spare time and found the issue.

I use this code

        //return the layer descriptions and © text into arrays - we use this later for the info dialog to generate hyperlinks and © text
        dojo.forEach(dynamicMapServiceLayer.layerInfos, function (layer) {
            var restAPIServicePage = {
                url: mapservice2 + "/" + layer.id +
                    "?f=json&token=uO3JarsebollockswxI9ExjTj_VE5IgAHr9YKPjoE3Mn00qipj9Baxjg1s0lm1c4c", callbackParamName: "callback", load: function (data) {
  LayerDescriptions[layer.id] = data.description;                    
                    dynamicMapServiceLayer.layerInfos[layer.id].copyrightText = data.copyrightText;                  
                }
            };
            dojo.io.script.get(restAPIServicePage);
        });

in my init function, to step throughmy layers and return the description into an array, which I use for layer specific hyperlinks in my ID task results.

As you see, I've had to hard code a token here as it appears to be this bit that doesn't go via the proxy, so fails to return anything

Is this the only realistic way of doing it?

Cheers

ACM

Re: tokens, proxy, secure services and the vanishing help

AdrianMarsden — Thu, 24 Jul 2014 12:32:34 GMT

Ah - answered my last question myself - I needed to wrap it in a esri.request.

   var requestHandle = esri.request({
                url:mapservice2 + "/" + layer.id + "?f=json",               
                handleAs: "json",
                load: function (data) {
                    console.debug(data)
                    LayerDescriptions[layer.id] = data.description;
                   dynamicMapServiceLayer.layerInfos[layer.id].copyrightText = data.copyrightText;
                    
                },               
            }, { useProxy: true });

Re: tokens, proxy, secure services and the vanishing help

AlexeiB — Tue, 23 Sep 2014 03:06:46 GMT

I don't mean to revive what appears to be a solved problem, but I am experiencing perhaps a similar issue.

HTTPS and Proxy

I was wondering if you had experienced any similar behavior when you had your issue?

Thanks,

Alex