topic Re: Create Token VB.Net in ArcGIS JavaScript Maps SDK Questions

Create Token VB.Net

jaykapalczynski — Mon, 18 Aug 2014 19:41:05 GMT

Trying to create a Token at my initial login page.

I think I may have some syntax error but cant figure out where....ANY ideas?

Imports System.Data.SqlClient

Imports System.Net.Mail

Imports System.Data

Imports System.IO

Imports System.Web.Configuration

Imports System.Web.UI

Imports System.Net

Partial Class Login

Inherits System.Web.UI.Page

Public username As String = ""

Public password As String = ""

Protected Sub LoginButton_Click(sender As Object, e As EventArgs)

username = Login1.UserName

password = Login1.Password

Session("username") = username

Session("password") = password

Dim sConn As String

sConn = System.Configuration.ConfigurationManager.ConnectionStrings("SQLConnection").ToString

Dim sqlConn As New SqlConnection(sConn)

Dim sqlcomm As New SqlCommand("select * from users_test where username='" & username & "'and password ='" & password & "'", sqlConn)

sqlcomm.CommandType = Data.CommandType.Text

Dim rdrloginexists As SqlDataReader

sqlConn.Open()

rdrloginexists = sqlcomm.ExecuteReader

Dim myDT As DataTable = New DataTable

myDT.Load(rdrloginexists)

sqlConn.Close()

Create_Token(username, password, "123456")

End Sub

Public Sub Create_Token(ByVal username As String, ByVal password As String, ByVal clientid As String)

Dim referer As String = "http://ourServer.gov/login.aspx"

Dim expiration = "2014"

Dim tokenUrl As String = "https:/http://ourServer.gov/login.aspx/Create_Token?username=" & username & "&password=" & password & "&referer=" & referer & "&expiration=" & expiration & "&f=json"

Dim tokenRequest = DirectCast(WebRequest.Create(tokenUrl), HttpWebRequest)

tokenRequest.Referer = referer

Dim token1 = tokenRequest.GetResponse()

Using stream As Stream = token1.GetResponseStream()

Dim reader As New StreamReader(stream, Encoding.UTF8)

Dim responseString As [String] = reader.ReadToEnd()

End Using

End Sub

End Class

Re: Create Token VB.Net

jaykapalczynski — Mon, 18 Aug 2014 21:46:57 GMT

Am I wrong on the String ...maybe something like this

Dim referer As String = "https://MyServer.gov/login.aspx"

Dim expiration = "10"

Dim tokenUrl As String = "https://MyServer.gov/arcgis/tokens?request=gettoken & username=" &username & "&password=" & password & "&referer=" & referer & "&expiration=" & expiration & "& f=json"

Anyone ever bypass the User Name authentication via VB.net in a JavaScript app? I have a password for my main Website...then have a bunch of apps inside...I dont want the user to have to enter password 5 million times..

Re: Create Token VB.Net

jaykapalczynski — Tue, 19 Aug 2014 22:11:51 GMT

I was able to get this working.....

ANY Questions PLEASE ASK

I have an .aspx with .aspx.vb LOGIN page that grabs the user Credentials and other necessary parameters for creating a Token...the token is created at the login page and stored as a session variable which is then consume in the redirect page. Once at this new page I am using this created TOKEN to render my Secured Services WITHOUT having the login again....

Imports System.Data.SqlClient

Imports System.Net.Mail

Imports System.Data

Imports System.IO

Imports System.Web.Configuration

Imports System.Web.UI

Imports System.Net

Partial Class Login

Inherits System.Web.UI.Page

Protected Sub LoginButton_Click(sender As Object, e As EventArgs)

Dim username As String

Dim password As String

username = Login1.UserName

password = Login1.Password

Dim sConn As String

sConn = System.Configuration.ConfigurationManager.ConnectionStrings("SQLConnection").ToString

Dim sqlConn As New SqlConnection(sConn)

Dim sqlcomm As New SqlCommand("select * from users_test where username='" & username & "'and password ='" & password & "'", sqlConn)

sqlcomm.CommandType = Data.CommandType.Text

Dim rdrloginexists As SqlDataReader

sqlConn.Open()

rdrloginexists = sqlcomm.ExecuteReader

Dim myDT As DataTable = New DataTable

myDT.Load(rdrloginexists)

If myDT.Rows.Count <> 0 Then

Create_Token(username, password)

Response.Redirect("Test.aspx")

End If

sqlConn.Close()

End Sub

Public Sub Create_Token(ByVal username As String, ByVal password As String)

Dim referer As String = "https://OurServer.gov"

Dim expiration As String = "120"

Dim format As String = "json"

' This will be replaced with the Actual IP of the requester....dont have that code yet...hard coded for now

' Replace with your IP Address

Dim clientid As String

clientid = "10.111.11.111"

Dim tokenUrl As String = "https://OurServer.gov/arcgis/tokens?request=gettoken&username=" & username & "&password=" & password & "&referer= & referer & clientid=" & clientid & "expiration=" & expiration & "&f=" & format & ""

Dim tokenRequest As New WebClient

Dim token = System.Text.Encoding.UTF8.GetString(tokenRequest.DownloadData(tokenUrl))

Session("tokentext") = token

End Sub

End Class

Re: Create Token VB.Net

ShaikhRizuan — Wed, 17 Jan 2018 14:12:48 GMT

Hi Jay,

The token generated does not respect the referer URL. If token is being used in any other application, i can see the map.

Actually it should not allow to view the map. I have posted the issue in detail in below link

https://community.esri.com/thread/207940-arcgis-token-not-working-properly-when-creating-programmatically

How to resolve this??