topic Re: QML ArcGIS Runtime API - generate a new token in Qt Maps SDK Questions

QML ArcGIS Runtime API - generate a new token

GISiste — Wed, 14 Sep 2022 13:13:33 GMT

Hello everyone,

I'm actually working on app mobile (doing some basics functionnalities like displaying data and searching the itineraire). The data is a simple web map with a featurelayer stored in the portal federated with the ArcGIS Server

The user can use her enterprise account to access to the portal then get the token to display the web map and the data. The token has 30 minutes to expire.

Now, I would like to generate a new token once the old one has expired without displaying the popup authentication.

I am a junior in QT and ArcGIS Runtime API for QML and any advice is the most welcomed

Thank you for the help

Re: QML ArcGIS Runtime API - generate a new token

LucasDanzinger — Wed, 14 Sep 2022 15:09:04 GMT

Have you seen the token authentication sample? https://github.com/Esri/arcgis-runtime-samples-qt/tree/main/ArcGISRuntimeSDKQt_QMLSamples/CloudAndPortal/TokenAuthentication

This makes use of the ArcGIS Runtime Toolkit's AuthenticationView. This component will ask the user to sign in on load, but then will automatically exchange/refresh tokens behind the scenes.

We have other samples as well that showcase how to use OAuth, IWA, and other sign in options.

Re: QML ArcGIS Runtime API - generate a new token

GISiste — Wed, 14 Sep 2022 15:30:26 GMT

Thank you @LucasDanzinger for your response. I've tested the sample and looks working. I will integrate this into my app and let you know

Thanks again

Re: QML ArcGIS Runtime API - generate a new token

GISiste — Wed, 14 Sep 2022 16:17:32 GMT

Hi @LucasDanzinger I've integrated this sample and the authentication popup still displaying when the token is expired.

Re: QML ArcGIS Runtime API - generate a new token

GISiste — Thu, 15 Sep 2022 10:53:33 GMT

Following up ... is there anyone who had an idea ?🤔

Thanks

Re: QML ArcGIS Runtime API - generate a new token

LucasDanzinger — Fri, 16 Sep 2022 16:27:03 GMT

As far as I know, the username and password supplied by the user should be used to obtain the new token once the old one expires. If that is not the case, then that is a bug in the API.

I have another suggestion to try:

Instead of using the AuthenticationView, you could connect to the AuthenticationManager and respond to credential challenges there. You can intercept the challenge and respond to the challenge programmatically

Something like:

Connections { target: AuthenticationManager function onAuthenticationChallenge(challenge) { const credential = ArcGISRuntimeEnvironment.createObject("Credential", {username: "", password: ""}); challenge.continueWithCredential(credential); } }

Here is the doc on that https://developers.arcgis.com/qt/qml/api-reference/qml-esri-arcgisruntime-authenticationmanager.html

Re: QML ArcGIS Runtime API - generate a new token

GISiste — Tue, 04 Oct 2022 14:25:16 GMT

thanks @ LucasDanzinger for youre help. I've tested the suggestion but still get the popup. Then I think this could be a bug in the API.

Hope this will be corrected soon

Re: QML ArcGIS Runtime API - generate a new token

DavidPuckett — Mon, 20 Mar 2023 22:17:09 GMT

So @LucasDanzinger if using oAuth, could this example be as simple as using the existing credential's refreshToken to create a new Credential and pass that to challenge.continueWithCredential(credential)?

I'm trying to refresh a token without prompting the user to log in again. Or, in my case, the app just hangs and 'acts weird' when the token expires. Thanks for any help.

Re: QML ArcGIS Runtime API - generate a new token

LucasDanzinger — Tue, 21 Mar 2023 15:48:32 GMT

If using OAuth, could you try setting the following OAuthClientInfo property:

oAuthClientInfo: OAuthClientInfo { oAuthMode: Enums.OAuthModeUser clientId: appPortal.clientId refreshTokenExchangeInterval: 30 // <--- Add this }

The API should use the refresh token to fetch a new access token for you automatically.

Re: QML ArcGIS Runtime API - generate a new token

DavidPuckett — Tue, 21 Mar 2023 18:27:23 GMT

Wow. Even easier. I actually had this commented out so you're telling me it would have automatically refreshed the token all along if enabled? 🙄 If this is the expected behavior then I will assume it works. I will report back otherwise. Thanks!

Re: QML ArcGIS Runtime API - generate a new token

GISiste — Wed, 22 Mar 2023 16:39:52 GMT

Hi @DavidPuckett

Is that worked for you ?

Thanks

Regards

Re: QML ArcGIS Runtime API - generate a new token

DavidPuckett — Thu, 23 Mar 2023 00:38:36 GMT

Setting the refreshTokenExchangeInterval on the oAuthClientInfo did not work to automatically refresh the token at the set interval.

Re: QML ArcGIS Runtime API - generate a new token

DavidPuckett — Thu, 23 Mar 2023 00:41:00 GMT

Hmmm @LucasDanzinger this did not work. I set the refreshTokenExchangeInterval on the oAuthClientInfo to 30 but it did not work to automatically refresh the token at the set interval. I started the app and let it sit for 30 minutes and sure enough it timed out. Any other tips? Is it dependent on any other properties?

Re: QML ArcGIS Runtime API - generate a new token

LucasDanzinger — Wed, 05 Apr 2023 14:41:05 GMT

we are looking into this still

Re: QML ArcGIS Runtime API - generate a new token

DavidPuckett — Wed, 05 Apr 2023 23:02:01 GMT

Appreciate the update. This has turned into a potential issue for us so any further info you can provide would be much appreciated.

Re: QML ArcGIS Runtime API - generate a new token

DavidPuckett — Fri, 09 Jun 2023 19:06:05 GMT

Following up to learn if there is more info here. I have since implemented a solution that refreshes the token via a NetworkRequest put on a Timer which works most of the time. However, if the app idles too long in the background the timer will not fire to refresh the access token and the app loses access. This is especially difficult because there is no indication to the user at all. It just doesn't work and there isn't then a way to refresh the token unless I implement a manual way to refresh, inelegant. Any word on whether the refreshTokenExchangeInterval workflow has a workaround here @LucasDanzinger ?