laptop and a wrench

Bug

Generating a token using the OAuth2.0 endpoints with a valid Client ID and Client Secret returns a token, which is not valid to access services, which are owned by the same user who created the registered application. This occurs in a federated Portal for ArcGIS and ArcGIS GIS Server environment with a hosting server configured.

Zuletzt veröffentlicht: March 1, 2016 ArcGIS API for JavaScript
Bug-ID-Nummer BUG-000093367
EingereichtJanuary 7, 2016
Zuletzt geändertJune 5, 2024
Gilt fürArcGIS API for JavaScript
Gefunden in Version3.14
BetriebssystemWindows OS
Betriebssystemversion7.0 64 Bit
StatusWill Not Be Addressed

Zusätzliche Informationen

This is intended behavior, it is a limitation of app logins. Tokens obtained by applications can only read public content and services. Although an App login cannot be used with private content, if the goal is to distribute or sell an app to organizations without ArcGIS Online (no named users), the control access to the content may be controlled by using an login mechanism (Identity) to the app. https://developers.arcgis.com/documentation/core-concepts/security-and-authentication/limitations-of-application-authentication/

Schritte zur Reproduzierung

Bug-ID: BUG-000093367

Software:

  • ArcGIS API for JavaScript

Benachrichtigung erhalten, wenn sich der Status eines Bugs ändert

Esri Support App herunterladen

Weitere Informationen zu diesem Thema erkunden

Unterstützung durch ArcGIS-Experten anfordern

An den technischen Support wenden

Esri Support App herunterladen

Zu Download-Optionen wechseln