topic Re: Enter the Application without username and password in ArcGIS Web AppBuilder Questions

Enter the Application without username and password

AlbertoCañivano1 — Sat, 11 Dec 2021 12:04:53 GMT

Good morning.
I am implementing a proxy to my application so that the user does not have to enter login/password every time he wants to enter the application.
I have the application downloaded and implemented on my local server.
I have checked that the webmap is shared with the Organization as well as the layers it has published.

I am using Xammp's Apache server and the proxy chosen was the PHP version offered by ESRI.

GitHub - Esri/resource-proxy: Proxy files for DotNet, Java and PHP.

First I configured the proxy.config:

<?xml version="1.0" encoding="utf-8" ?>
<ProxyConfig allowedReferers="*"
             logFile="proxy_log.log"
             mustMatch="true">
    <serverUrls>
    	<serverUrl url="https://MY_ORGANIZATION.maps.arcgis.com/"  
                   username="USER"  
                   password="PASSWORD"
                   matchAll="true"/>

        <serverUrl url="http://services.arcgisonline.com"  
                   matchAll="true"/>
	
    </serverUrls>
</ProxyConfig>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Second I configured the config.json:

"wabVersion": "2.12",
  "isWebTier": false,
  "httpProxy": {
    "useProxy": true,
    "alwaysUseProxy": false,
    "url": "PHP/proxy.php?",
    "rules": [{  
        "urlPrefix": "http://MY_ORGANIZATION.maps.arcgis.com/",  
        "proxyUrl": "PHP/proxy.php?"  
    }]‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The application loads correctly without asking for username/password.
However it does not load the features.

Access to XMLHttpRequest at 'https://static.arcgis.com/attribution/World_Imagery?f=json' from origin 'http://localhost' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.‍

Access to XMLHttpRequest at 'https://services9.arcgis.com/YJdM1D4Nb7rZFsXe/arcgis/rest/services/Viviendas/FeatureServer/0?f=json' from origin 'http://localhost' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.‍‍

Services that are not displayed return an error of the type:

{"error":{"code":499,"message":"Token Required","messageCode":"GWM_0003","details":["Token Required"]}}‍

I don't know if the mistake can come from:
1) I haven't introduced any service in the "proxy.config" so that it passes with the proxy and the features are displayed.
2) When entering username/password I have to change another parameter that I don't know what it can be.

Any idea? Thank you very much in advance

Re: Enter the Application without username and password

RobertScheitlin__GISP — Wed, 20 Nov 2019 18:53:27 GMT

Alberto,

The issue is that you are attempting to test the app using the localhost url. Once a proxy is involved and you are testing you need to no longer use the localhost url and instead use the actual machine name url.

Re: Enter the Application without username and password

AlbertoCañivano1 — Thu, 21 Nov 2019 08:32:41 GMT

Good morning, Robert. Thank you for your reply.

I have tried to call the application with the machine name and the IP of the equipment; it still gives the same message but instead of "http://localhost" appears the address I'm looking for, in addition to the token error required for each layer

according to the DevOps of Chrome

De: Robert Scheitlin, GISP <geonet@esri.com>

Enviado el: miércoles, 20 de noviembre de 2019 19:54

Para: Alberto Cañivano Moreno <acanivanom@boslan.com>

Asunto: Re: - Re: Enter the Application without username and password

GeoNet, The Esri Community | GIS and Geospatial Professional Community <https://community.esri.com/?et=watches.email.thread>

Re: Enter the Application without username and password

reply from Robert Scheitlin, GISP<https://community.esri.com/people/rscheitlin?et=watches.email.thread> in Web AppBuilder for ArcGIS - View the full discussion<https://community.esri.com/message/892411-re-enter-the-application-without-username-and-password?commentID=892411&et=watches.email.thread#comment-892411>

Re: Enter the Application without username and password

RobertScheitlin__GISP — Thu, 21 Nov 2019 13:23:37 GMT

Alberto,

Is your proxy and web app on the same server?

Re: Enter the Application without username and password

AlbertoCañivano — Thu, 21 Nov 2019 14:11:02 GMT

Yeah, it's in the same place.

I have managed to load the features; putting in the proxy.config the services that were giving me problems "https://static.arcgis.com" and "https://services9.arcgis.com".
Then I have configured them in config.json under "rules".
I know I'm doing something wrong because all the features are displayed (my webmap has 15) but it's very slow to refresh because it's doing the queries from the proxy to Arcgis online, instead of just to Arcgis online.

Re: Enter the Application without username and password

RobertScheitlin__GISP — Thu, 21 Nov 2019 14:44:45 GMT

Alberto,

If all the services you are using on services9 are not secured then you need to be more specific with your proxy rule to only those that are secure. Also make sure that the config.json has

"alwaysUseProxy": false,

Re: Enter the Application without username and password

DanielPérez_López — Fri, 22 Nov 2019 08:13:46 GMT

Robert,

As a safe service you are referring to private entities, those that are not public? all the entities in my viewer are private, only shared with my organization, so, if I understand it well, all would have to go through the proxy so it would be very slow to work with the viewer.

My goal is that you can enter the viewer from another website (redirecting the user through a url), users who enter are authorized in their application and use my application as a viewer to consult data, would make many requests and is annoying for them to be entering user / password every time they make queries to my viewer.

Re: Enter the Application without username and password

RobertScheitlin__GISP — Mon, 25 Nov 2019 14:11:45 GMT

Daniel,

Yes by "secured" services I am taking about services that are not public. If all of the data is secured then they all will need to go through the proxy.

Re: Enter the Application without username and password

DanielPérez_López — Mon, 25 Nov 2019 15:18:05 GMT

Thank you for your reply, Robert.
After setting the proxy to all features, the application is very slow, takes a long time to load and refresh when I move around the map. I see that what takes are the requests it makes for the proxy.

Do you know why this happens?

Thanks

Re: Enter the Application without username and password

RobertScheitlin__GISP — Mon, 25 Nov 2019 15:30:04 GMT

Daniel,

I do not experience slow response when using a proxy so I am not sure what to tell you.

Re: Enter the Application without username and password

AlbertoCañivano — Tue, 26 Nov 2019 07:17:41 GMT

Robert.

And do you know some way I could implement in my application in which: the user is signed in only once and that session lasts a certain time. The application I have is opened by a url in which the user makes filters and visualizes the chosen. Currently, each time you generate a new url, Arcgis Online asks for the username and password and that's what I want to avoid.
Thank you.

P.S. Sorry about the username (I am Alberto during this post), two Arcgis Online accounts have been linked and I have to configure it again.

Re: Enter the Application without username and password

RobertScheitlin__GISP — Tue, 26 Nov 2019 13:34:01 GMT

Alberto,

The proxy is the only route I have used. You could search GeoNet for enabling WAB with oAuth.

Re: Enter the Application without username and password

AlbertoCañivano — Tue, 26 Nov 2019 14:54:21 GMT

I've been reading documentation and testing the oAuth protocol, but I don't think it's worth it. Thank you for your help Robert.

Re: Enter the Application without username and password

AlbertoCañivano — Wed, 27 Nov 2019 08:34:11 GMT

Robert.

Just to close the post.
Do you think it would go faster if instead of publishing the entities in different services as I have it (there are 15 features) would go faster if I only publish a service with all features?
What if I use another proxy like .Net? Could I get better performance? Right now I have PHP proxy working.
Thank you.
P.S. I don't know how to close the post, the answer you gave me is good for me and correct.

Re: Enter the Application without username and password

RobertScheitlin__GISP — Mon, 02 Dec 2019 13:33:55 GMT

Alberto,

Do you think it would go faster if instead of publishing the entities in different services as I have it (there are 15 features) would go faster if I only publish a service with all features?

That could work. I have never used the php proxy so I am not sure about any speed difference.