topic Re: Sync upload errors when using token authentication in ArcGIS Runtime SDK for iOS Questions

Sync upload errors when using token authentication

MichaelDavis3 — Thu, 17 Dec 2015 00:10:22 GMT

We are migrating a mobile app to client infrastructure. The are requiring us to use a pre-generated token to access secured feature services. No big deal, we wire up the AGSCredential object to use the provided token. Download and test sync (with no data) works fine.

We are seeing an issue when uploading new data to sync. It appears that the token is not being sent along with the data to the feature service's upload endpoint. The error we are seeing is like this:

Error Domain=NSCocoaErrorDomain Code=401 "Empty username/password" UserInfo={NSURL=https://url.for.server/path/to/service/ServiceName/FeatureServer/uploads/randomUUID/uploadPart, NSLocalizedDescription=Empty username/password}

This is the same error we see when the token isn't set correctly, or the referrer URL isn't set. Makes me think the token from the credential isn't being sent along with the upload. I've checked the token and referrer in chrome and I can access the upload endpoint from there

This thread from over in .NET land would seem to confirm my suspicion:

GeodatabaseSyncTask + token

Divesh Goyal

Matt Cooper

Re: Sync upload errors when using token authentication

GagandeepSingh — Tue, 19 Jan 2016 18:20:59 GMT

Are you explicitly setting the token on the sync task?

Re: Sync upload errors when using token authentication

MichaelDavis3 — Tue, 19 Jan 2016 18:56:15 GMT

Hi Gagandeep - thanks for jumping in on this one.

I'm using an AGSCredential object created using the following

appDelegate.mapCredential = [[AGSCredential alloc] initWithToken:serviceToken referer:kFeatureServiceURL];

[appDelegate.mapCredential setAuthType:AGSAuthenticationTypeToken];

Where servcieToken is a valid token and kFeatureServiceURL is the URL to the feature service rest endpoint.

As I mentioned above, this is sufficient to download an offline database, and sync the database with no new data present. It errors out and fails when trying to upload new data.

AGSCredentials created with a username and password do not have this issue.

Re: Sync upload errors when using token authentication

GagandeepSingh — Tue, 19 Jan 2016 19:17:58 GMT

I am assuming that you are passing this credential object with each request you are making. Is it possible for you to check if the token is actually being passed when you do a sync request with changes? Using something like Charles.

Re: Sync upload errors when using token authentication

MichaelDavis3 — Tue, 19 Jan 2016 19:30:53 GMT

That's right - I'm using that AGSCredentials object with my sync task

self.gdbTask = [[AGSGDBSyncTask alloc]initWithURL:[NSURL URLWithString:kFeatureServiceURL]credential:appDelegate.mapCredential];

When I initially implemented this method I turned off all security so I could see the token being passed when the database was requested and synced. I'll double check to see if it is being passed in the upload task.

Re: Sync upload errors when using token authentication

MichaelDavis3 — Tue, 19 Jan 2016 20:32:23 GMT

I turned off security and tested an upload with Charles running - it looks like the token is being sent.

Here's what Charles sees:

http://path.to.server/arcgis/rest/services/Alaska/ADFG_Subsistence/FeatureServer/uploads/i2e0c73b3-f571-4816-8039-9c2f64c79bb6/uploadPart?token=validTokenIJustCreated

So the token is being sent but for some reason it is not authenticating correctly when used with the uploadPart endpoint.

Re: Sync upload errors when using token authentication

MichaelDavis3 — Tue, 19 Jan 2016 22:05:43 GMT

Hmm looking at the requests being sent it appears that when I sync with new data it:

Registers the upload database with the upload task (this is correctly showing the token as one of the request variables)
Attempts to upload a geodatabase part. This task includes the token in the URL, but it is not appearing as a request variable... the only variables that show up are the format (JSON), partID (0), and file name (longGUID_0.geodatabase)

Re: Sync upload errors when using token authentication

MichaelDavis3 — Tue, 19 Jan 2016 23:32:15 GMT

I think we figured out the issue. For all the geodatabase tasks the system dutifully uses the token and referer as defined when initializing the AGSCredential

EXCEPT the uploadPart task

uploadPart seems to be hard coding in a referer of "arcgisios". This of course is not the referer used to generate the token so the request fails.

If we re-generate the token to use the magic word (arcgisios) as the referer the whole thing works fine.

I'm guessing this is a left over hard-coded value from development or something, maybe something that can be fixed with an update?

Re: Sync upload errors when using token authentication

DiveshGoyal — Thu, 28 Jan 2016 00:21:27 GMT

uh-oh. We'll fix this.