topic Re: querystring-based token authentication in ArcGIS Experience Builder Questions

querystring-based token authentication

wbbrick — Tue, 01 Oct 2024 21:15:45 GMT

Hello,

I'm currently attempting to rewrite a WebAppBuilder app in Experience Builder and I'm running into trouble with authentication. Currently the app sits in an iframe nested within a larger framework and we've been passing a token in the querystring for authentication purposes. It doesn't appear this functionality is available yet in EB, but I've seen comments indicating that it's in progress.

Does anyone know the timeframe on enabling this functionality? I'd rather not edit any of the JIMU files if I don't have to, but without more support from esri on this I don't see another way.

Thanks!

Re: querystring-based token authentication

TimWestern — Tue, 15 Oct 2024 13:21:50 GMT

I'm curious if you are talking about with standard widgets being used? I do know that EXB custom widgets can call to feature services using a token on a url they may not normally be authenticated to. (These are subject time time outs though.)

Typically if you have an authenticated experience it prompts you either at first load or on first operation that requires it (seems to be what I've seen.) Many experiences won't load if you aren't authenticated to Portal on Enterprise or AGOL first. The first few widgets I built did rely on a token, but as I said those can expire when you least expect them to. So I'm not sure what the solution to this might be.