<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to securely access ArcGIS data via API Key and JavaScript SDK in ArcGIS JavaScript Maps SDK Questions</title>
    <link>https://community.esri.com/t5/arcgis-javascript-maps-sdk-questions/how-to-securely-access-arcgis-data-via-api-key-and/m-p/1350104#M82783</link>
    <description>&lt;P&gt;I am creating a web app (Single Page App) that accesses ArcGIS Platform data via an API Key using the JavaScript SDK. The app will have its own Auth mechanism.&lt;/P&gt;&lt;P&gt;My concern is how to do this securely. Just hardcoding the API Key in the client (as per demos) is insecure, as it is easily accessible.&lt;/P&gt;&lt;P&gt;I do see that in the past that proxy servers were suggested, but the official solutions for this are now depreciated.&lt;/P&gt;&lt;P&gt;I could just store the API key in server code server side and write all my own server side code to CRUD data, but that is a whole lot of work and defeats the point of using the JS SDK.&lt;/P&gt;&lt;P&gt;I should add that I will probably need to write my own server side code for when a user needs to insert, update or delete data (in order to implement business logic), but I would like to at least read data via a WebMap by using the JS SDK.&lt;/P&gt;</description>
    <pubDate>Thu, 16 Nov 2023 01:43:28 GMT</pubDate>
    <dc:creator>gatkins</dc:creator>
    <dc:date>2023-11-16T01:43:28Z</dc:date>
    <item>
      <title>How to securely access ArcGIS data via API Key and JavaScript SDK</title>
      <link>https://community.esri.com/t5/arcgis-javascript-maps-sdk-questions/how-to-securely-access-arcgis-data-via-api-key-and/m-p/1350104#M82783</link>
      <description>&lt;P&gt;I am creating a web app (Single Page App) that accesses ArcGIS Platform data via an API Key using the JavaScript SDK. The app will have its own Auth mechanism.&lt;/P&gt;&lt;P&gt;My concern is how to do this securely. Just hardcoding the API Key in the client (as per demos) is insecure, as it is easily accessible.&lt;/P&gt;&lt;P&gt;I do see that in the past that proxy servers were suggested, but the official solutions for this are now depreciated.&lt;/P&gt;&lt;P&gt;I could just store the API key in server code server side and write all my own server side code to CRUD data, but that is a whole lot of work and defeats the point of using the JS SDK.&lt;/P&gt;&lt;P&gt;I should add that I will probably need to write my own server side code for when a user needs to insert, update or delete data (in order to implement business logic), but I would like to at least read data via a WebMap by using the JS SDK.&lt;/P&gt;</description>
      <pubDate>Thu, 16 Nov 2023 01:43:28 GMT</pubDate>
      <guid>https://community.esri.com/t5/arcgis-javascript-maps-sdk-questions/how-to-securely-access-arcgis-data-via-api-key-and/m-p/1350104#M82783</guid>
      <dc:creator>gatkins</dc:creator>
      <dc:date>2023-11-16T01:43:28Z</dc:date>
    </item>
  </channel>
</rss>

