Not authenticated
\n{{/if}}\n```\n\n#### Session Methods\n\n| Method | Return | Description |\n| ------------------------------------- | ------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |\n| `isInRole('roleName')` | bool | is the current user in the specified role |\n| `isInAnyRole(['role1', 'role2'])` | bool | is the current user in any of the specified roles |\n| `hasPrivilege('privName')` | bool | does the current user have the specified privilege |\n| `hasAnyPrivilege(['priv1', 'priv2'])` | bool | does the current user have the specified privilege |\n| `isInOrg('orgId')` | bool | is the current user a member of the specified org |\n| `isInAnyOrg(['orgId1', 'orgId2'])` | bool | is the current user a member of any of the specified orgs |\n| `portalHostName()` | string | returns a protocol-less hostname for the portal i.e. `www.arcgis.com` or `dcdev.maps.arcgis.com` |\n| `portalRestUrl()` | string | returns https url for the portal api i.e. `https://www.arcgis.com/sharing/rest` or `https://dcdev.maps.arcgis.com/sharing/rest`. Respects ArcGIS Enterprise httpsPort settings |\n\nExample Usage\n\n```js\n//app/routes/privileged.js\n...\nbeforeModel(){\n let session = this.get('session');\n if(!session.isAuthenticated){\n this.transitionTo('signin');\n }else{\n if(!session.hasPrivilege('some:priv')){\n this.transitionTo('notauthorized');\n }\n }\n}\n\n```\n\n## ArcGIS Authentication Options\n\nThe ArcGIS Platform has a few types of authentication, based on OAuth2. For all the details, please consult the [documentation](https://developers.arcgis.com/documentation/core-concepts/security-and-authentication/).\n\n#### Named User Login\n\nSince your application will not be running on a sub-domain of ArcGIS.com, you will need to use a 'pop-up' based authentication flow.\n\nWith this model, you need to register an application at [developers.arcgis.com](https://developers.arcgis.com).\n\nNext, at [developers.arcgis.com](https://developers.arcgis.com) you need to register a Redirect URI for the application - this should be the url where your web application lives.\n\n**Note:** You can add multiple Redirect URI's for a single application, including `http://localhost`, which is convenient for development.\n\nOnce that's complete, you will need to copy the 'client id', and put it into the torii provider as noted above.\n\nTo initiate authentication with this flow, typically you will use a button and have it's action initiate the \"opening\" of a session.\n\nIn your application, on the controller or route where this button lives, add an action like:\n\n```js\n//app/routes/application.js\nimport Ember from \"ember\";\nexport default Ember.Route.extend({\n actions: {\n signin: function () {\n this.get(\"session\")\n .open(\"arcgis-oauth-bearer\")\n .then((authorization) => {\n Ember.debug(\"AUTH SUCCESS: \", authorization);\n // transition to some secured route or... so whatever is needed\n this.controller.transitionToRoute(\"secure\");\n })\n .catch((err) => {\n Ember.debug(\"AUTH ERROR: \", err);\n });\n },\n },\n});\n```\n\nWhen this action is fired, it will open the session, which will utilize torii to open a pop-up window with the ArcGIS.com login displayed.\n\n#### Esri Hosted Applications\n\nEsri hosted applications (hosted on a subdomain of arcgis.com) can have the ArcGIS.com login page embedded in an iframe.\n\nThere are a few additional configuration parameters required for the `torii-provider-arcgis` configuration so that the url that is constructed for the iframe has the correct parameters.\n\n```js\n//config/environment.js\nmodule.exports = function (environment) {\n var ENV = {\n // ... other ENV config stuff here\n\n torii: {\n sessionServiceName: \"session\",\n providers: {\n \"arcgis-oauth-bearer\": {\n apiKey: \"ESRI-WELL-KNOWN-APPLICATION-ID\",\n portalUrl: \"https://somePortal.com\", //optional - defaults to https://www.arcgis.com\n remoteServiceName: \"iframe\",\n display: \"iframe\",\n showSocialLogins: true, //optional, will default to false\n customRedirectUri: \"https://someUrl.com/custom-redirect\", //optional, but allows for deeper customization\n },\n },\n },\n };\n\n return ENV;\n};\n```\n\nSince torii is really designed to work with 'pop-up' style OAuth, in order to have the login page injected in the iframe on a specific template (i.e. /signin), we need to do a little more work.\n\nTorii has a iframe placeholder component, and this needs to be in the DOM before we can call `session.open`. So we add it into the signin template\n\n```js\n//app/templates/signin.hbs\n{\n {\n torii - iframe - placeholder;\n }\n}\n```\n\nBut - just adding it won't do anything - we still need a means to open the session _after_ the DOM has been rendered. We do this by adding some code into the route.\n\n```js\n//app/routes/signin.js\nimport Ember from \"ember\";\nexport default Ember.Route.extend({\n actions: {\n //this will fire once the route has fully transitioned\n //but the DOM may not be done rendering yet...\n didTransition: function () {\n //so we schedule it to run afterRender\n Ember.run.schedule(\"afterRender\", this, function () {\n this.get(\"session\")\n .open(\"arcgis-oauth-bearer\")\n .then((authorization) => {\n Ember.debug(\"AUTH SUCCESS: \", authorization);\n //transition to secured route etc...\n this.controller.transitionToRoute(\"secure\");\n })\n .catch((err) => {\n Ember.debug(\"AUTH ERROR: \" + JSON.stringify(err));\n });\n });\n },\n },\n});\n```\n\n## Running the Addon Locally\n\nThe torii example app at ArcGIS.com is configured to use\n`http://torii-example.com:4200/redirect.html` as their redirect\nuri, so you will need to make an alias in your hosts file that points\n**torii-example.com** to localhost, and you must view the examples from\nthat same host.\n\nTo use the ArcGIS Online authentication you need to run the app on **localui.arcgis.com** so you should also make an alias for this.\n\nTo add this hostname on a Mac:\n\n- `sudo vim /etc/hosts`\n- Add `127.0.0.1 torii-arcgis-provider-example.com`\n- Add `127.0.0.1 localui.arcgis.com`\n\nThe `/etc/hosts` equivalent filepath on Windows is:\n`%SystemRoot%\\system32\\drivers\\etc\\hosts`.\n\nFor more info, see [Hosts at wikipedia](