dolan...

token slamming

Discussion created by dolan... on Jun 6, 2013
Latest reply on Jun 19, 2013 by dolan...
I am seeing "token slamming" = we are getting multiple challenges/tokens in a short amount of time.
    [note: on startup, I have IdentityManager's .ChallengeMethod set to GetCredentialsChallengeMethod()]

    Here's what I saw (earlier today, in just three seconds from 1:30:52 - 1:30:54)

       1) our challengemethod GetCredentialsChallengeMethod() is called by ESRI dll as our token expires
          we keep track of the callback method (that ESRI wants us to call later) using class field m_esriProvidedCallback

       2) our method GetCredentialsChallengeMethod() then calls [IdentityManager.]Current.GenerateCredentialAsync(), asking for a callback to HandleCredentialResponse() when credential is available

       3) ESRI dll passes along a new credential by calling our HandleCredentialResponse()
          we keep track of this latest received credential using class field m_credential
          then, we make the callback ESRI wants us to via m_esriProvidedCallback

       4) the credential is exipring in 2 minutes, but we immediately get ANOTHER challenge (the above steps are repeated)

       5) again, that new credential is exipring in 2 minutes, but we immediately get ANOTHER challenge (the above steps are repeated)

Any ideas?
Thanks.

Outcomes