Let me 'splain.
[pause]
No, there is too much. Let me sum up.
Ok so we are using a highly modified version of the JSViewer sample from many moons ago, accessing Local GIS Server services from multiple servers, one that is secured using tokens (arcgis server 10sp4 for JAVA).We access these services twice. Once for the mapLayer, Once directly to the legend for a TOC icon. The application is deployed as a war file on tomcat, all services, application, and locally hosted API accessed via a WebApp Firewall (modproxy) to avoid cross-domain issues.On upgrading from 2.5 to 2.6, i had to add to my index.jsp function initSecurity() {
// Comment out these lines, and the onresize on body
// if you don't want full-screen
var serverInfo = new esri.ServerInfo();
serverInfo.server = 'https://www.mymanatee.org';
serverInfo.tokenServiceUrl = 'https://www.mymanatee.org/arcgis/tokens/generateToken';
esri.id.registerServers([serverInfo]);
};
if(document.location.protocol==="https:"){
dojo.addOnLoad(initSecurity);
}
for the services, and then for the TOC addvar params = {
url:urls+"/legend",
layerName:layerNames,
content:{f:"json"},
handleAs: "json",
sync: true,
load: dojo.hitch(this, "onLegendLoad"),
error: dojo.hitch(this, "onLegendError")
};
if(document.location.protocol==="https:"){
if(esri.id.credentials.length>0){
params.content["token"]=esri.id.credentials[0].token;
}
}which allows me to add the token to the url call for the legend json.This worked upgrading from 2.5 to 2.6 (it was not necessary at 2.5 as the token server was guessed)however it seems to be broken at 2.7/2.8 resulting in an uninitialized variable for me. Simply changing back to 2.6 gets rid of the errorThe onLegendLoad function onLegendLoad: function(response, ioArgs) {
var minScale=591657527.591555;
var maxScale=0;
if(!this.tocScales[ioArgs.args.layerName]){
this.tocScales[ioArgs.args.layerName]={response:response, ioArgs:ioArgs};
}
dojo.forEach(response.layers, dojo.hitch(this,function(layer){
dojo.forEach(layer.legend, dojo.hitch(this, function(legend){
var legendUrl= legend.url;
if(legendUrl.length<10){
legend.url = ioArgs.url.replace("legend?f=json&token=",layer.layerId+"/images/"+legendUrl+".png?token=");
legend.url = ioArgs.url.replace("legend?f=json",layer.layerId+"/images/"+legendUrl+".png");
}
minScale=layer.minScale;
maxScale=layer.maxScale;
if(minScale==0){
minScale=591657527.591555;
}
if((minScale==0&&maxScale<=1)||(this.currentScale>maxScale&&this.currentScale<minScale)){
layer.scaleVisible=true;
}else{
layer.scaleVisible=false;
}
}))
}))
this.layersInfoLegend.push(response.layers);
},Does two things, it loops through every service and every sublayer, and grabs the legend icon. This is where the token needed to be appended for the secure servicesIt also checks the scale dependency of the service to color code the TOC entry to show scale dependent visibility.Of course there are alot of other functions involved, but these are the only two that address security. The version of my site (by config file) that does not access any secure layers (http only) throws no errors and works perfectly at 2.8
