Select to view content in your preferred language

generateToken referer setting did not limit access. Token is still valid on web map with unmatched URL

528
1
07-11-2023 11:40 AM
Labels (3)
AllenHuang
New Contributor III

The referer setting in the Enterprise generateToken service does not seem to create a token that is valid only to the define URL. The generated token will still work on maps or scripts on different web hosts that I tested so far.

Is this a bug or did I misunderstand the referer's usage listed in the documentation?

https://developers.arcgis.com/rest/users-groups-and-items/generate-token.htm

Allen

0 Kudos
1 Reply