Community
Select to view content in your preferred language

How do I get "AllowedOrigins" to work?

1571
1
10-20-2016 04:29 PM
FredSpataro
by
Occasional Contributor III
‎10-20-2016 04:29 PM

Hi All, 

Maybe I'm hoping for something that's not possible but I thought that by setting this value to specific machine domains, it would prevent AGS from responsding to requests from other places.  Is that not the jist of it? 

I have:

  • AGS 10.3 server.
  • The Allowed origins property in the Admin site (Home>system>handlers>rest>servicesdirectory) is set to:
    • server1.mydomain.com 
  • I've saved the operation and restarted the AGS service.  

I can still access the map services on this box from:

  • a basic JavaScript API map on localhost
  • from the arcgis.com map
  • from web browser just copy/pasting the url
  • from the web application on another server.  

I haven't found anything that's "blocked"

What should I expect from this property being set?

Am I missing another step? 

I'll following the steps here: Restricting cross-domain requests to ArcGIS Server—Documentation (10.3 and 10.3.1) | ArcGIS for Serv... 

Thanks 

Fred

Tags (2)
1 Reply
JohnFannon
by
Occasional Contributor III
‎12-19-2022 09:46 AM

Hi - I have just noticed the same issue in 10.9.1 when trying to lock down a stand-alone ArcGIS Server with specific allowedorigins following this doc - https://enterprise.arcgis.com/en/server/10.9.1/administer/windows/restricting-cross-domain-requests-...

I've used our ArcGIS Online url (e.g. https://<orgname>.maps.arcgis.com) in the AllowedOrigins, but found that I can access the services on this ArcGIS Server from a different AGOL organistion that doesn't match the AllowedOrigins.

Did you ever resolve this or does anyone else know how to get this working?

Regards

John

0 Kudos