can I make role based authorization when sending requests to an ASP.NET MVC backend system. I am calling action methods and expecting JSON results, however, some action methods are decorated with the [Authorize] attribute, others require some role privileges to be present. I certainly hope that passing authorization data with every request is possible
View 1 RepliesI am trying to access html files protected by basic authentication. Below is the code to do that but I still get the authentication dialog. I checked the fiddler and found that for the first request authorization header is present but for the subsequent requests which is requested to load the .js, css & images the authorization header is not added. This is the reason I am getting the auth dialog.
Is there a way to add authorization header to the subsequent requests as well?
[Code]...
I have Basic Authorization mechanism on the server for WSDL/SOAP. How I can send "Authorization" header through Flex WebService?
Simplified example:
var ws:WebService = new WebService();
ws.wsdl = "http://localhost:8000/api/service.wsdl"
var encoder:Base64Encoder = new Base64Encoder();
encoder.insertNewLines = false;
I have an air app and I want to add proxy-authorization header whenever my client is behind a proxy. I am adding 'proxy-Authoriztion' header in urlRequest headers but still I am getting the OS prompt for username/password.
var loader:HTMLLoader = new HTMLLoader();
var be:Base64Encoder = new Base64Encoder();
be.insertNewLines = false;
be.encode("test" + ":" + "test");
[Code]...
Are there any differences implementing Flex application security in a clustered Java environment (such as Oracle Application Server/OC4J or a JBoss cluster) vs a single application server environment? (And/or does it depend on the specific environment software?)
What considerations are there in a situation where you need to authenticate with LDAP (AD) and store user access information in a database (ex. USER table containing username + permissions/roles info)? Any differences between Blaze DS and Granite DS?
I have an application that is coded using Flex 3 on UI side and java @ the service layer, along with BlazeDS. Now we need to authorize the users accessing the system based on the roles that are defined for them in the database, e.g. : say a user with role guest should not be able to access Admin tab on ui and also should not be able to do any operations other than viewing the data displayed on dashboard. Also the point to note here is that roles can be created dynamically by Super users from UI. I came across this link which describes how to perform Role Based Authentication & Authorization. With this approach I need to define the roles in service-config.xml but since my roles are not pre-defined I cannot go with this.
View 1 RepliesIs it possible to write to a local file 'example.txt' from a Flex swf? FileStream class is available in Adobe AIR, not in Flex. I want to write to from a swf,not AIR application. I am developing a kiosk type application which has to log user interaction data to a text file on the machine. Is there a code example for doing this? [URL]
View 1 RepliesIn my movie i have a link button with following, simple, function creating a link:
[Code]...
lately i've associated a class file (.as) to my movie and immediately after, when publishing the movie i got the following error message: 1046: Type was not found or was not a compile-time constant: URLRequest. as well as a couple of other related error messages: 1180: Call to a possibly undefined method URLRequest. 1180: Call to a possibly undefined method navigateToURL. when i remove the link to the class file, the problem goes away. also, i have checked the class file for mentioning of "URLRequest" and nothing is there.
During development I have to test using several different hosts. It is a pain to have to change the IP address everywhere I use navigateToURL or in an mx:HTTPService. I would like to set a var with the IP... public var hostIP:String = "192.168.1.100"; Then later I instead of doing...
[Code]....
I am sending userID through urlRequest like below code,
[Code]...
now when new window is opening in that new swf is opening(new project) that is also in flex only.there i need to retrive userID when initailizing only how can i retrive?
I'm attempting to upload a video via the YouTube api. I can authenticate everything fine and formulate the request just fine but the body of the request with the binary video data I'm having an issue with.
What's the proper way to encode the file data and add it to the body of the urlRequest?
My best guess was:
public function getFileStreamBytes(fileName:String):String{
var byteArray:ByteArray = new ByteArray();
var returnString:String = "";
[Code]....
In efforts to allow users to save their progress in my application, I've decided to allow them to save. In order to do this, I'd like to create an array with all the necessary information, and send that information to a coldfusion (.cfm) file and process the information from that page. Is it possible to send an array instead of a bunch of url variables? It is possible (and quite probable) that users would exceed the query string length of most browsers.
View 1 RepliesI'm trying to upload a bytearray, but am struggling to make the content-type go as image/png (it always goes as application/octet-stream no matter what I do.).I've checked the request with Charles Proxy, and can confirm that it indeed always goes as application/octet-stream.My code is:
protected function onObjectLoaded(event:Event):void
{
var byteArray:ByteArray = new ByteArray();
var fileName:String = fileReference.name;
var uploadPath:String = serviceURL;
[code]....
how to change this, so the bytearray itself gets passed in as image/png instead of octet-stream This image is being upload from the client side, and being passed as a FileReference, which I then invoke load(), and then get it's "data" attribute, which is where the bytearray is.
My Flex client app has got some data from the back end (RemoteObjects, BlazeDS, Spring). Client has got all the data it needs, it now needs to put some information in a CSV format and make it available for download.Using Flex 3 for this.
View 2 RepliesI am embedding a website into my application, and Adobe Air does not recognize the breakline HTML tag in the source code (Firefox and Chrome auto-correct the error). I have attached the source code below. Is there a way to replace the breakline with the correct syntax (no forward slash). I do not control the website, I am merely loading it into my application, so I can't just change it at the source. I am using an mx: html object and htmlLoader to load the url.
Website Source:
<ul>
<li><a href="Rpt_Selection_2.asp?Report=StatusReport/StatusReport.asp">Status Report</a></li>
<li><a href="Rpt_Selection_2.asp?Report=StatusReport/AlarmsAlerts.asp">Alarm History</a></li>
</ul><br/>
<table class="Header" cellspacing="0" cellpadding="0" border="0">
[Code] .....
MXML Component:
<mx:HTML id="htmlControl" width="100%" height="100%"/>
Script to load URL:
htmlControl.htmlLoader.load(new URLRequest("[URL]"));
We have a flex application that connects to a proxy server which handles authentication. If the authentication has timeout out the proxy server returns a json formatted error string. What I would like to do is inspect every URLRequest response and check if there's an error message and display it in the flex client then redirect back to login screen.
So I'm wondering if its possible to create an event listener to all URLRequests in a global fashion. Without having to search through the project and add some method to each URLRequest.
Flash banner block up authorization div. Currently it looks like:
View 2 RepliesIt seems impossible to accomplish a GET request that requires HTTP Authentication in ActionScript?
View 1 RepliesI'm trying to load an url with htaccess authorization w/o successthis is my code
Code:
public class test extends Sprite
{
[code]......
I'm trying to upload to amazon s3 using FileStream and UrlRequest.
But it seems I can only upload 2 files simultaneously.
Is there a reason for this? How can I work around this?
Also would this affect web service calls to a SOAP web service on the same domain?
I used upload functionality by html . using given code it's working fine .
[Code]...
BUT GETTING Bad request error . so anybody know , what did i wrong in code.
I get this error when I try to run my application as a standalone SWF. In case the application is run from the Flash IDE, the application works fine.
View 5 RepliesI have to connect to a third party tool for getting authorization, the tool is called superman which my client uses. Not sure whether this is inhouse or bought. I am using Spring security for authenticating, getting user is done by providing the query externally to JDBC service. When authorization query specific to this tool is executed, I get the following error:
[Code]...
I have this so far.
function authcheck(evt:MouseEvent):void {
if (ID_input=="447839" || Password_input=="33227") {
gotoAndStop("authgood");
} else {
gotoAndStop("authbad");
}}
logbtn.addEventListener(MouseEvent.CLICK , authcheck);
It's probably not working because AS3 can't identify the "ID_input" input field. I have the two input fields on the stage with the instance names ID_input and Password_input.
Need to find a way to send a delete method from Flash Player (Flex). Currently it's not done by default (except for from AIR), but I am sure someone has augmented the URLRequestHeader to get it to work properly. I've tried this, it isn't working:
[Code]...
Authentication is performed with Basic auth over SSL (although the password inside the basic auth is SHA-2'ed). The issue is that using basic authentication for the Flash client is causing the standard browser log-in box to appear because of "WWW-Authentication: Basic" in the header. Flash is unable to bypass this by manually setting the Authorization header prior to the request.Other clients need to be able to authenticate via the existing mechanisms, so rewriting the authentication logic would not be ideal.
I have the idea that the authorization headers sent to and received from flash client could be dynamically rewritten to use another name for Basic auth which would cause the browser not to understand the auth mechanism and not present the dialog box. Authentication headers to and from Tomcat could be rewritten from "WWW-Authenticate: Basic" to "WWW-Authenticate: PretendBasic" but ideally the built in container security could still handle the basic auth after the rewrite.
I wrote a filter to rewrite inbound headers as "WWW-Authenticate: PretendBasic" as "WWW-Authenticate: Basic" hoping the next filter chain would be auth and the request would be handled as normal. Unfortunately the Servlet specification states that a filter cannot be inserted prior to authentication. I think the only possibility of this working is to create a stackable JAAS authentication module that would first perform a header rewrite on requests if coming from the Flash client, and then pass authentication through to the existing container managed security systems.
I have the following actions in my file :
var xmlLoaderA:URLLoader = new URLLoader();
xmlLoaderA.addEventListener(Event.COMPLETE, LoadSomething);
xmlLoaderA.load(new URLRequest("my url"));[code]....
now imagine that the loading of the file is completed and we are in the "LoadSomething" function. How can we trace "my url" in this function? In another word I want to wite this action:
trace(Command);
and I want "my url" string in output.But I dont know what is the Command.
working my way through some tuts, and have set up WAMP. Trying to send some vars from AS3 to PHP to update a mtySQL table.My issue is that the php file does not seem to be receiving the variable info from flash, why not?
Here is the AS code
Code:
submit_btn.addEventListener(MouseEvent.CLICK,onClickSubmit)
function onClickSubmit(event:MouseEvent):void
{
var loader : URLLoader = new URLLoader();
[code]....
The PHP works cos when I run it from a browser $sd3 updates the database field to 78.This the output of the 'trace' statements
clicked
sd1=77&sd2=88&nickname=test1
The reason is probably simple but I can't see it.
I cannot ascertain why the code for one set of navigation buttons I've created works, but similar code does not. The code is rather lengthy, but I've pulled out the salient components to see if the Interwebs could help.
Here's the script that IS working:
Listener code:
Code:
cswordbutton.addEventListener(MouseEvent.CLICK,fetchcswordassets);
And the function code that goes with it:
Code:
function fetchcswordassets(e:MouseEvent):void{
var url:String = "knowntomeURL";
[Code].....
1) All of the actions are in a separate layer in the first frame;
2) There is only one scene;
3) I've given the same button a different instance name in many cases, to coincide with different expectations (URLs).
i have this code
public class TextboxXML extends Sprite
{
[...]
//XML[code]....
i want to get the xml-data. the xml will be generatet out of a php-function.testing it out of flash by "testing the movie" (apple+return), the php will be parsed and it works. when i test it on my lokal server, the same smf i mean, nothing happens.