I'm attempting to add a layer from a geoserver instance that's authenticated with HTTP Basic auth. I've followed the following guides:
Secure OGC services:
I've registered the server as a Trusted Server, but I still can't add a layer from it to the web map. I'm doing Add -> Add Layer from Web, selecting "A WFS OGC Web Service", and entering the URL. But when I click the Get Layers button, I get this error:
The WFS service, http://openapi.aurin.org.au/wfs, can't be added to the map. It's either not available or you have entered an invalid URL for the type of layer you want to reference.
In the geoserver logs, I see 401 authentication required errors, so it seems like ArcGIS Online isn't sending any authentication details, and isn't prompting for them. The server is enabled for CORS, with "Access-Control-Allow-Origin: *".
Could it be an HTTP / HTTPS issue? The WFS is defined as HTTP (and doesn't appear to support HTTPS). If it's expected that HTTPS isn't working and you must use HTTP, the browser would need to use HTTP to load the layer. I tried the same steps and seemed to get the prompt for authentication (when using HTTP):