topic Re: generateToken referer setting did not limit access. Token is still valid on web map with unmatched URL in ArcGIS Enterprise Portal Questions https://community.esri.com/t5/arcgis-enterprise-portal-questions/generatetoken-referer-setting-did-not-limit-access/m-p/1308883#M13796 <P><a href="https://community.esri.com/t5/user/viewprofilepage/user-id/186502">@AllenHuang</a>&nbsp;</P><P>It's bug.&nbsp;<SPAN>Bug ID: BUG-000141502.&nbsp;&nbsp;<A href="https://support.esri.com/en-us/bug/generated-token-to-a-federated-arcgis-server-with-an-in-bug-000141502" target="_blank">https://support.esri.com/en-us/bug/generated-token-to-a-federated-arcgis-server-with-an-in-bug-000141502</A></SPAN></P> Tue, 18 Jul 2023 02:39:09 GMT Lerman 2023-07-18T02:39:09Z generateToken referer setting did not limit access. Token is still valid on web map with unmatched URL https://community.esri.com/t5/arcgis-enterprise-portal-questions/generatetoken-referer-setting-did-not-limit-access/m-p/1307403#M13780 <P>The <STRONG>referer</STRONG>&nbsp;setting in the Enterprise <STRONG>generateToken</STRONG> service does not seem to create a token that is valid only to the define URL. The generated token will still work on maps or scripts on different web hosts that I tested so far.</P><P>Is this a bug or did I misunderstand the <STRONG>referer</STRONG>'s&nbsp;usage listed in the documentation?</P><P><A href="https://developers.arcgis.com/rest/users-groups-and-items/generate-token.htm" target="_blank" rel="noopener">https://developers.arcgis.com/rest/users-groups-and-items/generate-token.htm</A></P><P>Allen</P> Tue, 11 Jul 2023 19:10:59 GMT https://community.esri.com/t5/arcgis-enterprise-portal-questions/generatetoken-referer-setting-did-not-limit-access/m-p/1307403#M13780 AllenHuang 2023-07-11T19:10:59Z Re: generateToken referer setting did not limit access. Token is still valid on web map with unmatched URL https://community.esri.com/t5/arcgis-enterprise-portal-questions/generatetoken-referer-setting-did-not-limit-access/m-p/1308883#M13796 <P><a href="https://community.esri.com/t5/user/viewprofilepage/user-id/186502">@AllenHuang</a>&nbsp;</P><P>It's bug.&nbsp;<SPAN>Bug ID: BUG-000141502.&nbsp;&nbsp;<A href="https://support.esri.com/en-us/bug/generated-token-to-a-federated-arcgis-server-with-an-in-bug-000141502" target="_blank">https://support.esri.com/en-us/bug/generated-token-to-a-federated-arcgis-server-with-an-in-bug-000141502</A></SPAN></P> Tue, 18 Jul 2023 02:39:09 GMT https://community.esri.com/t5/arcgis-enterprise-portal-questions/generatetoken-referer-setting-did-not-limit-access/m-p/1308883#M13796 Lerman 2023-07-18T02:39:09Z