Locked Keys in Bing Tile Request URL

  • Monday, August 01, 2011 6:59 AM
     
     

    Hi,

         We have a application built on Flex displaying Bing Maps.My question is as below,

    Is it mandatory to pass the Token or Key in each Map Tile request?

    If we use a Key, then wouldnt our Key be exposed for others to misuse it?

    Regards,

    srayker

All Replies

  • Monday, August 01, 2011 7:51 AM
    Moderator
     
     Answered
    Currently only tokens can be used when calling tiles on their own. Hopefully this will change as the token service is retiring in March of next year as noted here: http://msdn.microsoft.com/en-us/library/cc980937.aspx As for exposing your key, everyone's key is exposed but there is no need to take someone's key as they can get a free one with a limit of a half a million transactions. 
    http://rbrundritt.wordpress.com
    • Marked As Answer by srayker Tuesday, August 02, 2011 5:19 AM
    •  
  • Monday, August 01, 2011 8:03 AM
     
     

    Ok, I have some doubts,

    Do we need to attach token to each tile request? We want to avoid doing this because the tile images are saved in the browser based on the URL's. Attaching keys will limit the Tile images to be cached only for a max of 8 hrs (i.e. max token expiry period) as the Token will change.

    Suppose we implement the Keys approach, then you mean to say we do not need to attach Keys for tile image request?

    Thanks in advance,

    Srayker

  • Monday, August 01, 2011 8:40 AM
    Moderator
     
     

    There is no way to use keys to authenticate a direct tile request, only the (retiring) token service, as Richard says.

    The only supported way to request images using a key is via the REST imagery service.


    twitter: @alastaira blog: http://alastaira.wordpress.com/
  • Monday, August 01, 2011 2:05 PM
     
     

    I may sound annoying, but let me try to restate the question as i am not fully satisfied with the answers above.

    We are working on a Flex application, which uses a 3rd party Map API. This API attaches the token for each tile request it makes to display the map.

    We are in process to optimize the map calls and speed up the map display. As mentioned above since the token is a part of the tile URL, the image is cache-able in browser only up to the period of token expiry. Hence in order to reuse the tiles, we plan to remove the token from the Tile request. Is this valid?

    Regards,

    srayker

  • Monday, August 01, 2011 4:15 PM
    Moderator
     
     Answered
    Is this valid?

    No. From the Bing Maps terms of use, Section 2i.) http://www.microsoft.com/maps/product/terms.html

    Subject to your compliance with this agreement, you may develop or host an online application (an “Application”) that is designed to access and use the service to display results for educational or non-profit use using only methods and means of access that are documented in the SDKs described at the end of this agreement (“SDKs”)

    Those SDKS are listed here: http://msdn.microsoft.com/en-us/library/dd877180.aspx. As I told you in my last response, the REST imagery service can be used to create a static image.


    We are working on a Flex application, which uses a 3rd party Map API.

    In that case, you can't use Bing Maps anyway because you'd be in breach of another of the terms of use:

    "You may not:... integrate the Bing Maps Platform or any of its content with any other mapping platform"


    twitter: @alastaira blog: http://alastaira.wordpress.com/
    • Marked As Answer by srayker Tuesday, August 02, 2011 3:57 AM
    •  
  • Tuesday, August 02, 2011 5:16 AM
     
     

    Thanks for the clarifications. As for the 3rd party Map API, we are using UMap which is a Microsoft partner.

    Regards,

    srayker

     

  • Tuesday, August 02, 2011 2:39 PM
    Moderator
     
     
    Even though UMap is made by a Microsoft Partner, they are not Microsoft and are still considered a 3rd party. The best people to contact to verify the liscensing is maplic@microsoft.com. If you have an unlimited Enterprise liscense then they may be able to make an exception with regards to using tokens.
    http://rbrundritt.wordpress.com