topic Re: Internal ONLY Web Map Sharing Issues in ArcGIS Web AppBuilder Questions

Internal ONLY Web Map Sharing Issues

BrianO_keefe — Fri, 25 Sep 2015 15:36:33 GMT

So we have a webmap that is INTERNAL ONLY. We have to build the 'ArcGIS' map side online, then using WAB build the web map, prop it up on our internal server, and now it's asking for AGOL sign on. This is supposed to be used by Field Crews?! They will 'never' have AGOL accounts... what is the proper workflow for a situation like this?

Re: Internal ONLY Web Map Sharing Issues

RobertScheitlin__GISP — Fri, 25 Sep 2015 15:49:29 GMT

Brain,

If your webmap is not publicly shared on your Orgs AGOL account then you will always be prompted for login. You can get past this by setting up some public generic webmap (that is publicly accessible and unsecured) and then use the Local Layer widget to add your internal map services.

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Fri, 25 Sep 2015 16:02:41 GMT

Hmmmmmm

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Fri, 25 Sep 2015 16:26:49 GMT

I remember back with another web map I was able to configure a proxy with a username / password that bypassed AGOL logins. Is this no longer an option?

Re: Internal ONLY Web Map Sharing Issues

RobertScheitlin__GISP — Fri, 25 Sep 2015 16:28:27 GMT

Brain,

Sure that is also an option.

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Mon, 28 Sep 2015 14:36:13 GMT

I've been all over the WAB Proxy settings and can't make hide nor hair. There isn't an ASHX file anymore. Where would one add the username/password to a proxy?

Re: Internal ONLY Web Map Sharing Issues

RobertScheitlin__GISP — Mon, 28 Sep 2015 14:51:13 GMT

Brain,

Are you looking in the Proxy.js? Hopefully not. You would have to download and deploy the app to your web server and then setup your proxy service using the esri proxy resource from github here Esri/resource-proxy · GitHub and deploy it to your web server and in the proxy.config you setup the serverUrl and can specify the username and password. Then in your WAB App you open the config.json and httpProxy url:

"httpProxy": {

"useProxy": true,

"alwaysUseProxy": false,

"url": "/WAB/Proxy/proxy.ashx",

"rules": []

}

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Mon, 28 Sep 2015 20:04:10 GMT

So would I create a new proxy.ashx file for each app?

Re: Internal ONLY Web Map Sharing Issues

RobertScheitlin__GISP — Mon, 28 Sep 2015 20:06:26 GMT

Nope, I have one for all my apps on my web server.

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Mon, 28 Sep 2015 20:11:26 GMT

I got it installed and running. Just tested it.

What I'm trying to figure out is, in my case where I have a webmap that is internal only... I have already propped up the webmap internally. But whenever it's accessed it asks for AGOL login credentials. I want that to stop... but I don't want those AGOL login credentials to fire for every webmap that we run (both internal and external) so is there some way to target THIS APP to use those credentials?

Used to, the proxy was inside the application directory structure... having the Proxy be a service running on the outside leaves me scratching my head as to how to access it via app.

Granted, MOST OF MY WEB MAPS will not even use it. But it's theoretically possible that one app would use one credentials and one app would use another. So I'm assuming I have to trigger this individual access through the proxy... but as I've never used a stand-alone proxy I'm a little confused and I'm not seeing anything on GITHub about it.

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Mon, 28 Sep 2015 20:13:41 GMT

Ohhhhhhh...

I need to prop up this proxy on my Internal only server... then ALL of my internal only maps would use it... right?

Re: Internal ONLY Web Map Sharing Issues

RobertScheitlin__GISP — Mon, 28 Sep 2015 20:15:57 GMT

yep

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Mon, 28 Sep 2015 21:23:50 GMT

So one last question...

How do I put the AGOL username in the proxy? Am I pointing the <serverUrl url=" " /> to AGOL or My Map? And am I putting this in proxy.config?

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Tue, 29 Sep 2015 19:29:31 GMT

<serverUrl url="http://localhost url to my map here"

clientID="My Id Here"

clientSecret="My Secret Here"

matchAll="true">

</serverUrl>

{error: {code: 403,message:"403 - Forbidden: Access is denied.",details:[message:"Current proxy configuration settings do not allow requests which do not include a referer header."]}}

I'm banging my head against the keyboard at this point. Proxies make zero sense... I've created my application at developer.arcgis... I've installed (and tested) my proxy... I've propped up my WAB created map on our internal web server...

EVERYTIME I OPEN THE MAP I GET THE REQUEST FOR AGOL USER CREDENTIALS!

I'm losing my mind... time to get eat lunch...

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Tue, 29 Sep 2015 21:29:40 GMT

So at this point I have followed the directions from this post EXACTLY.

Now I'm getting a whitescreen, with a frowny face, and the words :

Unable to create map: Unexpected token :

So I feel like I am closer to a solution...

Re: Internal ONLY Web Map Sharing Issues

RobertScheitlin__GISP — Fri, 10 Dec 2021 23:19:10 GMT

Brain,

Here is a my steps for setting up the Proxy to bypass the login (they are a little different from that post).

1. Here is my proxy.config. Notice I am using username and password and not clientId and clientSecret:

EDIT: but I just tested with clientId and clientSecret and it works fine that way too.

<?xml version="1.0" encoding="utf-8" ?>
<ProxyConfig allowedReferers="*"
             mustMatch="true">
    <serverUrls>
        <serverUrl url="http://calhoun.maps.arcgis.com"
                   username="username"
                   password="password"
                   matchAll="true"/>
        <serverUrl url="http://services.arcgisonline.com"
                   matchAll="true"/>
        <serverUrl url="http://gis.calhouncounty.org"
                   matchAll="true"/>
        <serverUrl url="http://gislap183"
                   matchAll="true"/>
    </serverUrls>
</ProxyConfig>

2. My config.json is basically the same:

"httpProxy": {
    "useProxy": true,
    "alwaysUseProxy": false,
    "url": "/WAB/Proxy/proxy.ashx",
    "rules": [{
        "urlPrefix": "http://calhoun.maps.arcgis.com/",
        "proxyUrl": "/WAB/Proxy/proxy.ashx"
    }]
  }

3. My app registration is basically the same:

URL: http://gis.calhouncounty.org/ MY apps url (removed for obvious reasons)

API: JavaScript

App Type: browser

Purpose: Configurable

Redirect URI's: http://gis.calhouncounty.org

The big thing about step 3 is that the item is PUBLIC (the app item that you are registering). The webmap is still private and secured though.

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Fri, 10 Dec 2021 23:19:14 GMT

I was so hopeful.

I mimic'd your layout above almost exactly (obviously used my url's instead).

\wwwroot\DotNet\proxy.config

<ProxyConfig allowedReferers="*" mustMatch="true">
    <serverUrls>
        <serverUrl url="http://services.arcgisonline.com" matchAll="true"/>

  <serverUrl url="http://MyInternalOnlyServer" matchAll="true" />
  <serverUrl url="http://maps.cityoftulsa.org" matchAll="true" />
  <serverUrl url="http://cityoftulsa.maps.arcgis.com"
  username="myUsername"
  password="myPassword"
  matchAll="true" />

  </serverUrls>
</ProxyConfig>

\wwwroot\WebAppName\config.json

   "wabVersion":"1.3",
   "isTemplateApp":false,
   "isWebTier":false,
   "httpProxy":{  
      "useProxy":true,
      "alwaysUseProxy":false,
   "url" : "/DotNet/proxy.ashx",
      "rules":[
  "urlPrefix" : "http://cityoftulsa.maps.arcgis.com/",
  "proxyUrl":"/DotNet/proxy.ashx"
      ]
   },

And I still get this...

I just feel like this would be easier if I worked for Naperville... lol.

Re: Internal ONLY Web Map Sharing Issues

RobertScheitlin__GISP — Thu, 01 Oct 2015 13:34:53 GMT

Brain,

And the registered app is set to public right?

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Thu, 01 Oct 2015 16:14:00 GMT

Yes it is.

I've read everything I can get my hands on. Nothing even shows this error I'm getting?! It's really frustrating. I try to avoid filing a ticket whenever I can because if I can find the answer it sticks in my head better that way... but ugh. I'm about to make a call...

Re: Internal ONLY Web Map Sharing Issues

BrianO_keefe — Thu, 01 Oct 2015 21:47:29 GMT

I've now exhausted StackExchange... Dojo... and a few other locations.

"Unexpected Token" appears to mean that the Javascript is messed up. An If-Then-Else loop issue. I've tried digging through the ConfigManager.js to no avail. Chrome Dev tools are useless to me.

It looks like I'm making a call to ESRI tomorrow... this is ridiculous. It appears that the problem here is trying to setup a secured Web Map on an Internal server for specific company access. And AGOL makes it impossible. I haven't tried it yet, but I'm fairly certain that if I opened up my webmap security on AGOL the map would work internally... and all of our sensitive data would be free to the public... ugh.

You would THINK that ESRI would have expected this or have a system in place to handle it.