Locally hosted token-based authentication for the Web AppBuilder for ArcGIS Print Widget generates an invalid PDF output when printing a secured map service that has stored credentials in ArcGIS Online.
最後に公開された状態: April 26, 2018ArcGIS Online
不具合 ID 番号
BUG-000109333
送信されました
November 6, 2017
最終更新日
June 5, 2024
適用対象
ArcGIS Online
見つかったバージョン
5.3
ステータス
Known Limit
開発チームによる確認後に、この問題が、Esri の管理の範囲外にあるソフトウェアの既知の制限に関するものであると判断されました。 問題の「参考情報」セクションに、さらに詳細な説明が示されていることがあります。
参考情報
The behavior in this issue is the normal security strategy by design, not a bug.
Token-based authentication
When the locally hosted app wants to access the online item, including web map item and its secured layers, it must send a request to "https://www.arcgis.com/sharing/generateToken" to get the token. The token itself contains your credential and other necessary information.
When printing the map, the token will be sent to the print service. The problem is that the token is generated only for the host machine of the app which is controlled by the following request parameters:
origin:http://**.local:5000
referer:http://**.local:5000/USA_secure/
The print service is hosted on another server, so it cannot use the token directly.
OAuth authentication
When using OAuth authentication, users must create a registered app and assign the appId to the locally hosted WAB app. When users log in, they will also get a token, but this token is different from the token in token-based authentication.
When the service receives such a request, it checks users' credential against the registered app. The service works if the registered app says "OK, the token is issued from here".