topic Re: Token authentication in 100.0.0 in Java Maps SDK Questions

Token authentication in 100.0.0

DavidMomper — Thu, 16 Mar 2017 18:35:52 GMT

When I try to make calls to a token-secured RemoteResource using the new 100.0.0 API, I get an exception:
"com.esri.arcgisruntime.io.JsonEmbeddedException: Token Required"

Is there a way to add a Token to a UserCredentials object? In the 10.2.4, I would create a UserCredentials object, and simply call setUserToken(), but that method no longer exists. In the new API, the UserCredentials class only takes a username and a password. There is another type of Credential, OAuthTokenCredential, but this is not appropriate to my use case because I'm not using OAuth.

How is non-OAuth token-based authentication handled in the new API?

Re: Token authentication in 100.0.0

nita14 — Sun, 12 Dec 2021 07:11:02 GMT

David,

Look at the snippet below.

ArcGISMapImageLayer trafficLayer = new ArcGISMapImageLayer(url);
trafficLayer.setId("TrafficLayer");
trafficLayer.setCredential(new UserCredential("ArcGISOnlineUserNameCaseSensitive", "password"));‍‍‍

Regards,

Adam

Re: Token authentication in 100.0.0

DavidMomper — Fri, 17 Mar 2017 14:25:40 GMT

That's not what I'm looking for. That's just username and password. I need a way to handle token-based authentication, as described here: ArcGIS Security and Authentication | ArcGIS for Developers

Token-based: Your app provides a valid user name and password for the user. In the response, you receive a token that is included with requests for secured content on the portal for authenticated resources. Available with ArcGIS Online and ArcGIS Enterprise version 10.2 or earlier.

The UserCredential class can only store a username and password, not a token. Specifically what I'm looking for is:

1. How to connect to a token generation service to obtain a token? Is there anything like OAuthTokenCredentialRequest that will work for non-OAuth token generation?

2. Once I have a valid token, how to use the token to authenticate with a RemoteResource? Maybe a subclass of Credential that can store a token, so I can return it from my AuthenticationChallengeHandler.

Re: Token authentication in 100.0.0

nita14 — Sat, 18 Mar 2017 17:19:40 GMT

David,

ok, I see what you are getting at. Well, I am not aware of such possibility in ArcGIS Runitme 100.0.0.

You can generate valid token at the ArcGIS Online service endpoint , but you need to somehow handle its refreshing and appending to ArcGIS Server endpoint requests, which in fact UserCredentials do for you.

Regards,

Adm

Re: Token authentication in 100.0.0

DavidMomper — Mon, 20 Mar 2017 16:07:32 GMT

Adam Nicinski wrote:
You can generate valid token at the ArcGIS Online service endpoint , but you need to somehow handle its refreshing and appending to ArcGIS Server endpoint requests, which in fact UserCredentials do for you.

Can you please elaborate on how UserCredentials does this? I can't find any way to get a UserCredentials to handle tokens; if you know a way to do this, can you please post a few lines of code to demonstrate how it works?

Re: Token authentication in 100.0.0

nita14 — Tue, 21 Mar 2017 07:17:39 GMT

David,

What I want to say is just that UserCredentials creates and refershes tokens automatically for you on the valid generateToken endpoint.

I can only quote the docs:

Class Overview
Represents a named user credential. User credentials will be used to authenticate against HTTP-secured services, and to generate tokens for authenticating token-secured services.

Hope this helps,

Adam