topic Re: How to capture OAuth Esri code after 100.11 deprecations? in ArcGIS Runtime SDK for iOS Questions

How to capture OAuth Esri code after 100.11 deprecations?

greg_eam — Tue, 09 Nov 2021 22:25:52 GMT

I recently upgraded to the ArcGIS Runtime SDK for iOS version 100.12 from 100.9 and now my OAuth single-sign-on does not work. The OAuth sign-on view does display, but once I enter my credentials and click Sign In, I am no longer able to capture the Esri login code that I need.

I understand that these methods were deprecated in 100.11:

AGSApplicationDelegate.shared().application(_:open:options:)
AGSAuthenticationManagerDelegate wantsToShowViewController(_:viewController:)
AGSAuthenticationManagerDelegate wantsToDismissViewController(_:viewController:)

However, in my AppDelegate, application(_:openUrl:Options:) no is no longer called after after sign-in is completed.

From what I've seen so far, it sounds like I shouldn't need to make any code changes for this to work. I feel like I am missing something. Any help would be appreciated!

Greg

Re: How to capture OAuth Esri code after 100.11 deprecations?

NimeshJarecha — Wed, 10 Nov 2021 15:33:41 GMT

Hi Greg,

I would like to know and understand few things to help you with this issue.

1. What do you mean by my OAuth single-sign-on does not work?

2. What extra code you had in the AppDelegate's, application(_:openUrl:Options:)?

3. What you were doing with the Esri login code from the delegate method?

Regards,

Nimesh

Re: How to capture OAuth Esri code after 100.11 deprecations?

greg_eam — Wed, 10 Nov 2021 16:58:04 GMT

Hi Nimesh,

By OAuth single-sign-on not working, I mean that my app's redirect URL is not getting called after Sign In is clicked on the ArcGIS login screen. This had been taking place through the AppDelegate's application(_:openURL:options) method.
In this AppDelegate method, I have code that parses out the Esri login code from the provided URL.
Once I have the Esri login code, I then pass it to my organization's portal which validates it and returns a login token for my app.

Thanks,

Greg

Re: How to capture OAuth Esri code after 100.11 deprecations?

greg_eam — Wed, 10 Nov 2021 17:17:14 GMT

I should also mention that after I upgraded the Runtime SDK, a prompt now shows before the ArcGIS login screen appears. It warns that my app wants to use "arcgis.com" to sign in and I have to press Continue to get the the ArcGIS login.

Re: How to capture OAuth Esri code after 100.11 deprecations?

NimeshJarecha — Wed, 10 Nov 2021 17:46:08 GMT

Hi Greg,

1. Just to let you know why we deprecated those delegate methods. We were using SFSafariViewController to display the OAuth login page which is changed to use ASWebAuthenticationSession which does not require the AppDelegate's, application(_:openUrl:Options:) to be called. Still you have to setup your App to use the redirectURL as ASWebAuthenticationSession is going to use it. Also, the additional prompt you are getting is from ASWebAuthenticationSession as well.

2. You don't need to generate a token using the Esri login code as we do it.

3. Once, AGSPortal object is loaded, you will see the generated access token using the Esri login code on the AGSPortal.credential.token.

Hope this helps!

Regards,

Nimesh

Re: How to capture OAuth Esri code after 100.11 deprecations?

greg_eam — Wed, 10 Nov 2021 22:52:20 GMT

Nimesh,

Thank you for this information. I did try using the AGSPortal.credential.token value to do my login and it failed. I found the following error on my app's server: "{ code: 400, message: Invalid code }".

I should clarify that I am not using the Esri login code to generate a token from Esri; I am using the Esri login code to generate a token for my own product's login. On my app's server, the Esri code I pass from iOS is validated here with a grant type of authorization code: https://www.arcgis.com/sharing/rest/oauth2

Once validated, my app's server provides its own token back to iOS so that I may login to my app. All of this is done after the ArcGIS login succeeds.

Re: How to capture OAuth Esri code after 100.11 deprecations?

greg_eam — Tue, 07 Dec 2021 20:22:19 GMT

After much more research, I have found the solution to this. It turns out that I needed to use the 2nd method for implementing OAuth (register a custom URI handler) defined here. I was previously using the 1st method: https://developers.arcgis.com/documentation/mapping-apis-and-services/security/arcgis-identity/serverless-native-apps/

The steps:

Implement AGSAuthenticationManagerDelegate (https://developers.arcgis.com/ios/api-reference/interface_a_g_s_authentication_manager.html#a96f0b45d293fdd1ac19030ef8bcf54bf)
Set the AGSAuthenticationManager.shared().delegate to the delegate implementation
Call the Esri OAuth2 authorize endpoint (sharing/rest/oauth2/authorize) using ASWebAuthenticationSession
In the callback, parse the Esri code out of the result URL
Call the Esri OAuth2 token endpoint (sharing/rest/oauth2/token) using AGSRequestOperation
In the callback, parse the Esri token from the response
Initialize an AGSPortal and call load on it
In AGSAuthenticationManagerDelegate.didReceiveAuthenticationChallenge, initialize an AGSCredential with the Esri token (https://developers.arcgis.com/ios/api-reference/interface_a_g_s_credential.html#af11a55ef3f3ae29670a239e80a08fc83)
Call continueWithCredential on the challenge object (https://developers.arcgis.com/ios/api-reference/interface_a_g_s_authentication_challenge.html#a4cac4e6c4a9e3c7c7480e60b36f26f16)
Call the custom server application with the Esri code to log into custom product