I'm having some issues with using tokens I generate from a Python script by hitting a public ArcGIS Server's generateToken endpoint.
Our IT routes traffic in some convoluted ways (which is to say dynamically) such that using a token generated from a generateToken request using 'client':'requestip' in the parameters sometimes will end up with a token denied error. Basically, if the generateToken request first comes from ip address B, but then the REST request comes from IP address B but uses the token generated from ip address A, I'll get an error.
I'm curious if there is a way around this somehow without going through IT. I'm unclear how I would use 'client':'referer' in the generateToken request, since this is coming from a Python script being run on a server and not a webapp. Is this even possible?
Solved! Go to Solution.
Every arcgis.gis.GIS and arcgis.gis.server.Server has an underlying connection object that has an underlying Requests session. You just need to set the token based on a referrer and then update your Requests session header to reflect it:
>>> from arcgis.gis.server import Server
>>>
>>> kwargs = {
... 'url': ,
... 'username': ,
... 'password':
... }
>>>
>>> svr = Server(**kwargs)
>>>
>>> svr._con
<arcgis.gis._impl._con._connection.Connection object at 0x00000164C182FD68>
>>>
>>> svr._con._session
<requests.sessions.Session object at 0x00000164C6988128>
>>>
>>> svr._con._session.headers
{'User-Agent': 'Geosaurus/1.8.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Referer': 'http'}
>>>
>>> svr._con._session.headers['referrer'] = r'http://www.whateveryoulike.com/myscript'
>>>
>>> svr._con._session.headers
{'User-Agent': 'Geosaurus/1.8.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Referer': 'http', 'referrer': 'http://www.whateveryoulike.com/myscript'}
>>>
>>>
Every arcgis.gis.GIS and arcgis.gis.server.Server has an underlying connection object that has an underlying Requests session. You just need to set the token based on a referrer and then update your Requests session header to reflect it:
>>> from arcgis.gis.server import Server
>>>
>>> kwargs = {
... 'url': ,
... 'username': ,
... 'password':
... }
>>>
>>> svr = Server(**kwargs)
>>>
>>> svr._con
<arcgis.gis._impl._con._connection.Connection object at 0x00000164C182FD68>
>>>
>>> svr._con._session
<requests.sessions.Session object at 0x00000164C6988128>
>>>
>>> svr._con._session.headers
{'User-Agent': 'Geosaurus/1.8.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Referer': 'http'}
>>>
>>> svr._con._session.headers['referrer'] = r'http://www.whateveryoulike.com/myscript'
>>>
>>> svr._con._session.headers
{'User-Agent': 'Geosaurus/1.8.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Referer': 'http', 'referrer': 'http://www.whateveryoulike.com/myscript'}
>>>
>>>
Thank you - I'm not using the Python API in this case, but just using requests directly. And yes, it was easy to add a referer header to my request directly and everything seemed to work nicely!
headers = {'referer':'https://myurl/myscript'}
data = requests.post(url, data, headers=headers)