topic Re: How do I add a secured feature service using a token in 4.X? in ArcGIS JavaScript Maps SDK Questions

How do I add a secured feature service using a token in 4.X?

MattStayner — Thu, 25 Mar 2021 23:15:38 GMT

I need to load a secured layer using an Esri token. In 3.X I did this:

const url = `${serviceUrl}?token=${esriToken}&f=json` var featureLayer = new FeatureLayer({ url: url });

It worked great and would load the secure feature service.

I do the exact same thing in 4.X, and I get the pop-up asking me to sign in. I double-checked the URL, and it provides the JSON, so that's not the issue.

What gives? I already signed in using OAuth2. That's how I got the token. I don't want to have to sign in again. Please help. Thanks!

Re: How do I add a secured feature service using a token in 4.X?

ReneRubalcava — Fri, 26 Mar 2021 15:24:24 GMT

There are a couple of options, but if you simply want to append it to the URL, you can use the before() requestInterceptor

https://developers.arcgis.com/javascript/latest/api-reference/esri-config.html#RequestInterceptor

Re: How do I add a secured feature service using a token in 4.X?

MattStayner — Fri, 26 Mar 2021 18:03:14 GMT

Hi @ReneRubalcava ,

Thanks for the quick response? Yes, I just want to append the token to the URL. Why do I need to use a `requstInterceptor`. Why can't I just append the token to the request as shown in this example? I didn't include the actual token, but you get the idea.

At any rate, that approach doesn't work. I tried looking at before() and I can't wrap my mind around how I would do that. Would you mind updating the example to show how that would work?

Re: How do I add a secured feature service using a token in 4.X?

ReneRubalcava — Fri, 26 Mar 2021 19:53:00 GMT

We strip any URL parameters added to a layer URL to better manage params we need to use for queries and stuff. This is by design. The preferred way is IdentityManager for tokens, but you can use the requestInterceptors for this.

esriConfig.request.interceptors.push({ // set the `urls` property to the URL of the FeatureLayer so that this // interceptor only applies to requests made to the FeatureLayer URL urls: "https://services6.arcgis.com/ExtdhXSbhHKK7FFW/arcgis/rest/services/Related_Table_2/FeatureServer/0", // use the BeforeInterceptorCallback to add token to query before: function(params) { params.requestOptions.query = params.requestOptions.query || {}; params.requestOptions.query.token = "my-token"; }, });

You can double check that its appended by checking the network request.

Hope that helps.

Re: How do I add a secured feature service using a token in 4.X?

ZohaibUddinKhan — Wed, 31 Mar 2021 04:57:17 GMT

@ReneRubalcava Thanks for the reply. I used the same code as provide by you and replace the following:-

URL- https://services.slip.wa.gov.au/arcgis/rest/services/Landgate_v2_Subscription_Services/Cadastral/MapServer/35
Token- Generate Token from https://token.slip.wa.gov.au/arcgis/tokens/

Now, my code looks like following:-

But, it is still asking for the Username / Password on the page. Do you know what I'm missing? Thanks.

Re: How do I add a secured feature service using a token in 4.X?

ReneRubalcava — Wed, 31 Mar 2021 15:30:54 GMT

There is probably a request being made to the root of the service to check for capabilities. You can make the request interceptor url to the root of the server.

{ urls: "https://services.slip.wa.gov.au" }

Re: How do I add a secured feature service using a token in 4.X?

UndralBatsukh — Wed, 31 Mar 2021 16:05:38 GMT

Hi there,

You can do couple of things. If you are using JS API version 4.18, then you can take advantage of FeatureLayer.customParameters property as it was introduced for cases like this one. You can do this:

var layer = new FeatureLayer({ url: serviceUrl, customParameters: { "token": yourToken } });

If you are using a version older than 4.18, then you can use interceptors to modify the request before it is sent. You can do this:

Hope this helps,

-Undral

Re: How do I add a secured feature service using a token in 4.X?

MattStayner — Wed, 31 Mar 2021 16:56:33 GMT

This worked perfectly for me. Thanks @ReneRubalcava !

Re: How do I add a secured feature service using a token in 4.X?

ZohaibUddinKhan — Thu, 01 Apr 2021 07:37:17 GMT

Thanks @UndralBatsukh for the reply. We're using JS API version 4.18 and unfortunately it is still asking for the credentials. Am I doing something terribly wrong here ?

Following is our code:-

<!DOCTYPE html> <html> <head> <meta charset="utf-8" /> <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=no" /> <title></title> <style> html, body, #viewDiv { padding: 0; margin: 0; height: 100%; width: 100%; } </style> <link rel="stylesheet" href="https://js.arcgis.com/4.18/esri/themes/light/main.css"> <script src="https://js.arcgis.com/4.18/"></script> <script> require(["esri/config", "esri/Map", "esri/views/MapView", "esri/layers/FeatureLayer"], function (esriConfig, Map, MapView, FeatureLayer) { esriConfig.apiKey = "AAPK9c1060b46848481f85233a3e75........-......._hEZz"; const map = new Map({ basemap: "arcgis-topographic" // Basemap layer service }); const view = new MapView({ map: map, center: [115.860299, -31.954594], // Longitude, latitude zoom: 13, // Zoom level container: "viewDiv" // Div element }); const featureLayerUrl = "https://services.slip.wa.gov.au/arcgis/rest/services/Landgate_v2_Subscription_Services/Cadastral/MapServer/41"; //const featureLayerUrl = "https://token.slip.wa.gov.au/arcgis/rest/services/Landgate_v2_Subscription_Services/Cadastral/MapServer/41"; var layer = new FeatureLayer({ url: featureLayerUrl, customParameters: { "token": "nXKRnEHxOLrfCyVAs3......_....."//Get the token from https://token.slip.wa.gov.au/arcgis/tokens/ } }); map.add(layer); }); </script> </head> <body> <div id="viewDiv"></div> </body> </html>

and following are the results while browsing:-

Re: How do I add a secured feature service using a token in 4.X?

ZohaibUddinKhan — Thu, 01 Apr 2021 08:20:34 GMT

Hi @UndralBatsukh , thanks for the reply. I've created a separate post so that we can track the solution and mark it accepted later.

Here is the Post https://community.esri.com/t5/arcgis-api-for-javascript/how-to-access-secured-arcgis-server-map-service/m-p/1042775

Re: How do I add a secured feature service using a token in 4.X?

ZohaibUddinKhan — Thu, 01 Apr 2021 08:30:24 GMT

Thanks @ReneRubalcava for the reply. I tried the change but no luck! Any clue what I'm doing wrong? I've created a separate post so that we can keep track and accept the solution later. (New post url: https://community.esri.com/t5/arcgis-api-for-javascript/how-to-access-secured-arcgis-server-map-service/m-p/1042775)

Following is my code for JS API v4.16:-

Re: How do I add a secured feature service using a token in 4.X?

ReneRubalcava — Thu, 01 Apr 2021 15:19:21 GMT

Check all the network requests to that domain and verify that the token is appended to the URL. Maybe a token source URL permission issue?

Re: How do I add a secured feature service using a token in 4.X?

ZohaibUddinKhan — Fri, 02 Apr 2021 06:59:18 GMT

Thanks @ReneRubalcava for the reply and help. I can see the token is getting appended in the URL, but maybe CORS is the problem. Trying to find the solution to overcome it. If you have any suggestions then feel free to share.

Re: How do I add a secured feature service using a token in 4.X?

ReneRubalcava — Fri, 02 Apr 2021 15:23:57 GMT

You'll need to enable CORS at the server level to fix this. How you do that can vary based on the type of server.

Re: How do I add a secured feature service using a token in 4.X?

jaykapalczynski — Mon, 10 May 2021 17:09:44 GMT

Are there parameters for Editing? I see your example shows Query Parameters but what about if I need to edit this?

Re: How do I add a secured feature service using a token in 4.X?

jaykapalczynski — Mon, 10 May 2021 17:10:55 GMT

I see that you are adding Query Parameters.....are there Edit parameters for editing?

Re: How do I add a secured feature service using a token in 4.X?

ReneRubalcava — Mon, 10 May 2021 18:18:31 GMT

I don't know if this was available when this post was made, maybe, and I missed it, happens. But the layers have a property called customParameters you can use to add tokens like this.

https://developers.arcgis.com/javascript/latest/api-reference/esri-layers-FeatureLayer.html#customParameters

In this case, you can avoid using an interceptor to add url params.

Re: How do I add a secured feature service using a token in 4.X?

ShmuelKatorzaDAO — Wed, 10 Nov 2021 07:05:51 GMT

Hi ,

I needed also to change in the security option the support for two options:

"allowHttpPostQueryParams"

"allowHttpGet"

under arcgis server admin -- > security --> tokens

Re: How do I add a secured feature service using a token in 4.X?

ekleiman22 — Sat, 09 Dec 2023 08:55:53 GMT

Thank you, it really works and not only for a feature layer. Is it possible to do the same thing for array of layers or I should use this script for each needed layer separately?

Update: solved. I understood that

esriConfig.request.interceptors.push

means that interceptors is array so we can add several elements into it.