Hard to know what you have gotten done.
- Have you setup the OAuth app inside of ArcGIS Online? This is discussed in the sample Authenticate with OAuth
- You can do through dev account if you are using AGOL tied to dev account Register an OAuth application
- Do on AGOL, this is a bit old so there are slight GUI changes How to Implement OAuth 2.0 for ArcGIS
- You need to implement the IOAuthAuthorizeHandler. See at bottom
- Wire up everything. This is done before you can make a call that will open the OAuth window. AppClientID, ClientSecret, RedirectUrl all come from the OAuth app in AGOL (or dev center)
private void Initialize(Uri serverUri)
{
try
{
var redirectUri = new Uri(RedirectUrl);
ServerInfo serverInfo = new ServerInfo(serverUri)
{
TokenAuthenticationType = TokenAuthenticationType.OAuthAuthorizationCode,
OAuthClientInfo = new OAuthClientInfo(AppClientId, redirectUri)
{
UserInterfaceStyle = UserInterfaceStyle.Dark,
ClientSecret = ClientSecret,
},
};
AuthenticationManager.Current.RegisterServer(serverInfo);
AuthenticationManager.Current.OAuthAuthorizeHandler = _oAuthAuthorizeHandler;
AuthenticationManager.Current.ChallengeHandler = new ChallengeHandler(CreateCredentialAsync);
}
catch (Exception e)
{
_log?.Log(e.Message, Category.Exception, Priority.None);
}
}
private async Task<Credential> CreateCredentialAsync(CredentialRequestInfo info)
{
try
{
Credential credential = null;
try
{
if (info.ServiceUri != null)
{
var options = new GenerateTokenOptions { TokenExpirationInterval = TimeSpan.FromDays(1) };
credential = await AuthenticationManager.Current.GenerateCredentialAsync(info.ServiceUri, options);
AuthenticationManager.Current.AddCredential(credential);
ConnectionStatus = ConnectionStatus.Connected;
}
}
catch (OperationCanceledException)
{
ConnectionStatus = ConnectionStatus.NotConnected;
// Login was cancelled, no need to display an error to the user.
}
catch (Exception e)
{
_log.Log(e.Message, Category.Warn, Priority.None);
}
return credential;
}
catch (Exception)
{
return null;
}
}
One annoying with the API is that connecting to Portal does not automatically trigger the the challenge handler. So you have to have the code in the method that connects to portal that, imo, should only be in ChallengeHandler
public async Task<ArcGISPortal> OpenPortalAsync(string portalUrl, bool refresh = false)
{
var sharingUri = GetSharingUri(portalUrl);
//THIS LINE SHOULD OPEN WINDOW!
var credential = await AuthenticationManager.Current.GenerateCredentialAsync(sharingUri);
AuthenticationManager.Current.AddCredential(credential);
_portal = await ArcGISPortal.CreateAsync(sharingUri);
PortalUser = _portal.User;
return _portal;
}
private Uri GetSharingUri(string portalUrl)
{
return new Uri($"{portalUrl}/sharing/rest");
}
IOAuthAuthorizeHandler implementation from esri sample:
// In a desktop (WPF) app, an IOAuthAuthorizeHandler component is used to handle some of the OAuth details. Specifically, it
// implements AuthorizeAsync to show the login UI (generated by the server that hosts secure content) in a web control.
// When the user logs in successfully, cancels the login, or closes the window without continuing, the IOAuthAuthorizeHandler
// is responsible for obtaining the authorization from the server or raising an OperationCanceledException.
public class OAuthAuthorizeHandler : IOAuthAuthorizeHandler
{
// Window to contain the OAuth UI.
private Window _authWindow;
// Use a TaskCompletionSource to track the completion of the authorization.
private TaskCompletionSource<IDictionary<string, string>> _tcs;
// URL for the authorization callback result (the redirect URI configured for your application).
private string _callbackUrl;
// URL that handles the OAuth request.
private string _authorizeUrl;
// Function to handle authorization requests, takes the URIs for the secured service, the authorization endpoint, and the redirect URI.
public Task<IDictionary<string, string>> AuthorizeAsync(Uri serviceUri, Uri authorizeUri, Uri callbackUri)
{
if (_tcs != null && !_tcs.Task.IsCompleted)
throw new Exception("Task in progress");
_tcs = new TaskCompletionSource<IDictionary<string, string>>();
// Store the authorization and redirect URLs.
_authorizeUrl = authorizeUri.AbsoluteUri;
_callbackUrl = callbackUri.AbsoluteUri;
// Call a function to show the login controls, make sure it runs on the UI thread for this app.
Dispatcher dispatcher = Application.Current.Dispatcher;
if (dispatcher == null || dispatcher.CheckAccess())
{
AuthorizeOnUIThread(_authorizeUrl);
}
else
{
Action authorizeOnUIAction = () => AuthorizeOnUIThread(_authorizeUrl);
dispatcher.BeginInvoke(authorizeOnUIAction);
}
// Return the task associated with the TaskCompletionSource.
return _tcs.Task;
}
// Challenge for OAuth credentials on the UI thread.
private void AuthorizeOnUIThread(string authorizeUri)
{
// Create a WebBrowser control to display the authorize page.
WebBrowser webBrowser = new WebBrowser();
// Handle the navigation event for the browser to check for a response to the redirect URL.
webBrowser.Navigating += WebBrowserOnNavigating;
// Display the web browser in a new window.
_authWindow = new Window
{
Content = webBrowser,
Width = 450,
Height = 450,
WindowStartupLocation = WindowStartupLocation.CenterOwner
};
// Set the app's window as the owner of the browser window (if main window closes, so will the browser).
if (Application.Current != null && Application.Current.MainWindow != null)
{
_authWindow.Owner = Application.Current.MainWindow;
}
// Handle the window closed event then navigate to the authorize url.
_authWindow.Closed += OnWindowClosed;
webBrowser.Navigate(authorizeUri);
// Display the window.
_authWindow.ShowDialog();
}
// Handle the browser window closing.
private void OnWindowClosed(object sender, EventArgs e)
{
// If the browser window closes, return the focus to the main window.
if (_authWindow != null && _authWindow.Owner != null)
{
_authWindow.Owner.Focus();
}
// If the task wasn't completed, the user must have closed the window without logging in.
if (!_tcs.Task.IsCompleted)
{
// Set the task completion source exception to indicate a canceled operation.
_tcs.SetCanceled();
}
_authWindow = null;
}
// Handle browser navigation (content changing).
private void WebBrowserOnNavigating(object sender, NavigatingCancelEventArgs e)
{
// Check for a response to the callback url.
const string portalApprovalMarker = "/oauth2/approval";
WebBrowser webBrowser = sender as WebBrowser;
Uri uri = e.Uri;
// If no browser, uri, or an empty url, return.
if (webBrowser == null || uri == null || string.IsNullOrEmpty(uri.AbsoluteUri))
return;
// Check for redirect.
bool isRedirected = uri.AbsoluteUri.StartsWith(_callbackUrl) ||
_callbackUrl.Contains(portalApprovalMarker) && uri.AbsoluteUri.Contains(portalApprovalMarker);
// Check if browser was redirected to the callback URL. (This indicates succesful authentication.)
if (isRedirected)
{
e.Cancel = true;
// Call a helper function to decode the response parameters.
IDictionary<string, string> authResponse = DecodeParameters(uri);
// Set the result for the task completion source.
_tcs.SetResult(authResponse);
// Close the window.
if (_authWindow != null)
{
_authWindow.Close();
}
}
}
private static IDictionary<string, string> DecodeParameters(Uri uri)
{
// Create a dictionary of key value pairs returned in an OAuth authorization response URI query string.
string answer = "";
// Get the values from the URI fragment or query string.
if (!string.IsNullOrEmpty(uri.Fragment))
{
answer = uri.Fragment.Substring(1);
}
else
{
if (!string.IsNullOrEmpty(uri.Query))
{
answer = uri.Query.Substring(1);
}
}
// Parse parameters into key / value pairs.
Dictionary<string, string> keyValueDictionary = new Dictionary<string, string>();
string[] keysAndValues = answer.Split(new[] { '&' }, StringSplitOptions.RemoveEmptyEntries);
foreach (string kvString in keysAndValues)
{
string[] pair = kvString.Split('=');
string key = pair[0];
string value = string.Empty;
if (key.Length > 1)
{
value = Uri.UnescapeDataString(pair[1]);
}
keyValueDictionary.Add(key, value);
}
// Return the dictionary of string keys/values.
return keyValueDictionary;
}
}
Thanks,
-Joe
