FRAMES | NO FRAMES

Description

The Token Manager is a web service that issues tokens. Tokens are used instead of user credentials when consuming GIS services that have token-based security enabled on them. Tokens are also used for consuming the Administrator API through a script or application.

Token Manager exposes a REST-ful interface along with an HTML page to fetch tokens manually. An instance of the token manager is integrated into the Administrator API and can be reached at:

http://server:6080/arcgis/admin/generateToken

For backwards compatibility, another instance of token manager is available at:

http://server:6080/arcgis/tokens/generateToken

However, the above instance of Token Manager is configured by the administrator and started up only when token-based security is enabled on the GIS server. The user store configuration is represented in JSON format as follows:

	{
		"type": "BUILTIN",
		"properties": <properties>
	}
				

Use the update token configuration operation to change the token manager.

Properties

Property Description
sharedKey The key used to encrypt the tokens.
longTimeout The maximum time in minutes for which a token can be requested. The default is 1440.
shortTimeout The shortest amount of time in minutes for which a token is issued. The default is 60.

Example

The JSON representation of a Token Manager configuration:

			
{
	"type": "BUILTIN",
	"properties": {
		"sharedKey": "my really really secret passphrase",
		"longTimeout": "2880",
		"shortTimeout": "120",
	}
}