如何生成令牌以查询REST ArcGIS服务？

Question

我有一个需要访问REST ArcGIS服务的.NET应用程序。该服务是私人服务，需要基于令牌的身份验证来访问服务中的数据。由于我是ArcGIS新手，因此我不知道如何生成令牌并在我的.NET应用程序中使用它。

Answer 1

有关概览，请参阅https://developers.arcgis.com/authentication/accessing-arcgis-online-services/#using-rest。有两个选项：

1. 更方便：使用ArcGIS运行SDK：https://developers.arcgis.com/net/desktop/guide/use-arcgis-token-authentication.htm
2. 哈德：发布自己的令牌请求：https://developers.arcgis.com/authentication/accessing-arcgis-online-services/#using-rest（无.NET的样本，可能是因为你真的应该使用ArcGIS运行时）

以下是ArcGIS Runtime SDK for .NET示例，该示例使用硬编码登录。我上面链接的.NET页面也有一个示例向用户询问凭据。

try 
{ 
    var opts = new GenerateTokenOptions(); 
    opts.TokenAuthenticationType = TokenAuthenticationType.ArcGISToken; 

    // generate an ArcGIS token credential with a hard-coded user name and password 
    // (if authentication fails, an ArcGISWebException will be thrown) 
    var cred = await IdentityManager.Current.GenerateCredentialAsync(
           "http://serverapps10.esri.com/arcgis/rest/services/", 
           "user1", 
           "pass.word1", 
           opts); 

    // add the credential to the IdentityManager (will be included in all requests to this portal) 
    IdentityManager.Current.AddCredential(cred); 

    // load a layer based on a secured resource on the portal 
    var layer = new ArcGISDynamicMapServiceLayer(new Uri 
         ("http://serverapps10.esri.com/arcgis/rest/services/GulfLawrenceSecureUser1/MapServer")); 
    await layer.InitializeAsync(); 

    // add the layer to the map and zoom to its extent 
    this.MyMapView.Map.Layers.Add(layer); 
    await this.MyMapView.SetViewAsync(layer.FullExtent); 
} 
catch (ArcGISWebException webExp) 
{ 
    MessageBox.Show("Unable to authenticate with portal: " + webExp.Message); 
} 
catch (Exception exp) 
{ 
    MessageBox.Show("Unable to load secured layer: " + exp.Message); 
} 

Answer 2

如果您想要简单的http请求，您可以创建一个简单的连接，以遵循以下内容。

首先，你必须知道生成令牌url。例如，如果您的服务器url为http://myserver/arcgis/rest/services ....，您的生成令牌网址如'http://myserver/arcgis/tokens/generateToken'。 第二操作是准备结果模型生成令牌的结果，它只是像下面

/// <summary> 
/// acgis'e yapılan token isteme isteği sonunda elde edilen json'a ait modeldir 
/// </summary> 
public class ArcgisTokenResponseModel 
{ 
    /// <summary> 
    /// token bilgisi 
    /// </summary> 
    public string token { get; set; } 

    /// <summary> 
    /// token bilgisinin geçerlilik süresi 
    /// </summary> 
    public string expires { get; set; } 

} 

而对于可重用的代码，我们可以创建类的查询字符串准备键值。 这个类就干脆像下面

/// <summary> 
/// arcgis yapısına uygun token modelidir 
/// </summary> 
public class TokenModel 
{ 
    /// <summary> 
    /// servisin dönüş tipini belirleyen fieldttır . ör ; json,html 
    /// </summary> 
    public string f { get; set; } 

    /// <summary> 
    /// servise gönderilecek kullanıcı adı bilgisi 
    /// </summary> 
    public string username { get; set; } 

    /// <summary> 
    /// servise gönderilecek olan şifre bilgisidir. 
    /// </summary> 
    public string password { get; set; } 

    /// <summary> 
    /// token bilgisinin hangi ip için geçerli olacağını bildirir 
    /// </summary> 
    public string ip { get; set; } 

    /// <summary> 
    /// token bilgisinin ne kadar süreli olacağını belirtir 
    /// </summary> 
    public int expiration { get; set; } 

    /// <summary> 
    /// servis client bilgisi 
    /// </summary> 
    public string client { get; set; } 

    /// <summary> 
    /// constructure 
    /// </summary> 
    /// <param name="username"></param> 
    /// <param name="password"></param> 
    /// <param name="ip"></param> 
    /// <param name="expiration"></param> 
    /// <param name="f"></param> 
    public TokenModel(string username, string password, string ip, int expiration, string f = "json") 
    { 
     this.expiration = expiration; 
     this.f = f; 
     this.ip = ip; 
     this.password = password; 
     this.username = username; 
    } 

    /// <summary> 
    /// modelin query string halinde dönüşünü sağlar 
    /// </summary> 
    /// <returns></returns> 
    public string GetQueryStringParameter() 
    { 
     return "f=" + this.f + "&username=" + this.username + "&password=" + this.password + "&ip=" + this.ip + "&expiration=" + this.expiration; 
    } 



} 

然后准备生成用户名和密码从ArcGIS服务器令牌功能。此功能可喜欢这个

/// <summary> 
    /// mapserver ve feature server için token bilgisi üretir 
    /// </summary> 
    /// <returns></returns> 
    protected string GetToken(string generateTokenUrl,string username,string password) 
    { 
     try 
     { 
      string ipadress = _serverInformationHelper.GetIPAddress(); 
      int exp = 60; 
      if (!string.IsNullOrEmpty(username) && !string.IsNullOrEmpty(password)) 
      { 
       Model.Arcgis.TokenModel tokenModel = new Model.Arcgis.TokenModel(username, password, ipadress, exp); 

       //token bilgisinin alınacağı server url'i 
       string post = tokenModel.GetQueryStringParameter(); 
       WebClient clientToken = new WebClient(); 
       clientToken.Headers.Add("Content-Type: application/x-www-form-urlencoded"); 
       string tokenResult = clientToken.UploadString(generateTokenUrl, post); 
       ArcgisTokenResponseModel resultTokenModel = _seriliazer.Deserialize<ArcgisTokenResponseModel>(tokenResult); 
       if (resultTokenModel != null && !string.IsNullOrEmpty(resultTokenModel.token)) 
        return resultTokenModel.token; 
      } 
      return null; 
     } 
     catch (Exception ex) 
     { 
      return null; 
     } 
    } 

毕竟，任何你想要的，你可以使用为gettoken（）function.if我们想要的，我们可以简化操作。

祝

Answer 3

看一看令牌如何在Esri的代理获得： https://developers.arcgis.com/authentication/working-with-proxies/

，特别是： https://github.com/Esri/resource-proxy/tree/master/DotNet https://github.com/Esri/resource-proxy/blob/master/DotNet/proxy.ashx

Answer 4

正如@spiskula提到你可以按照图示的方法在https://github.com/Esri/resource-proxy/blob/master/DotNet/proxy.ashx中，特别是getNewTokenIfCredentialsAreSpecified方法。

这是一个非常简单的例子（.Net 4.5），在没有SDK的情况下做同样的事情。用户需要通过错误处理等方式使其更加健壮。

private string GetToken() 
    { 
     var request = (HttpWebRequest)WebRequest.Create("https://www.arcgis.com/sharing/rest/oauth2/token/"); 

     var postData = "client_id=yourclientid"; //required 
     postData += "&client_secret=yourclientsecret"; //required 
     postData += "&grant_type=client_credentials"; //required 
     postData += "&expiration=120"; //optional, default 
     var data = Encoding.ASCII.GetBytes(postData); 

     request.Method = "POST"; 
     request.ContentType = "application/x-www-form-urlencoded"; 
     request.ContentLength = data.Length; 

     using (var stream = request.GetRequestStream()) 
     { 
      stream.Write(data, 0, data.Length); 
     } 

     var response = (HttpWebResponse)request.GetResponse(); 

     var responseString = new StreamReader(response.GetResponseStream()).ReadToEnd(); 

     ESRITokenResponse eToken = Newtonsoft.Json.JsonConvert.DeserializeObject<ESRITokenResponse>(responseString); 

     return eToken.access_token; 
    } 

public class ESRITokenResponse 
{ 
    public string access_token { get; set; } 
    public string expires_in { get; set; } 
}