Flash :: HTTP Authentication Using Htaccess/htpasswd Dialogue Box Comes Up Twice?
Dec 2, 2009
I have a site that has the main path under password protection. I also have a subfolder that have a separate (htaccess/htpasswd) password protection. For some reason, when I access the subfolder, I'm asked to put in my id/password twice. All of the files that are referenced are under the subfolder.
What should I be doing to troubleshoot this? I've tried this on different browsers and it's the same behavior. There is one main html page with a .swf (the only thing on the page)...it loads other assets but they are within the same subfolder.
I am trying to access a .Net service which requires an authentication header. If WebService is used it works fine. But when it is accessed using HTTPService it throws error. The project is already done by somebody else using HTTPService. Now changing to webService requires some time since there needs to be modification in a lot of files.
Below is the SOAP envelop required by the service.
I am hosting a site that has some flash in it.Now a different site is linking directly to the flash, causing massive traffic for me. The problem: I do not gain any ads which would help me pay the server bills.I thought it would be OK to redirect the direct link to the flash to the site containing it.
Client has a flash navigation menu on his website. When the site is accessed via [URL] the hardcoded links in the flash nav load pages properly. When accessing the website via the [url] the site navigation links can not load the proper pages and instead just redirect the user to the root domain.
I assume this can be fixed with a change to the .htaccess but I do not know how flash handles these links.
.htaccess: Options +FollowSymLinks RewriteEngine on
I can't get a RewriteRule to work. I have a PHP page with a flash object embedded in it. What I would like to is to write a rule in order to achieve this:URL...and all the parameters to the flash object (in the query string, if available) should also be "copied" by the RewriteRule:[code]
I'm building an RPG game and need help with the dialogue. I have no idea how to go about it. What I want to set up is something that after approaching a character and pressing spacebar (or any key), text displays with an image to the left of the character speaking. I've tried looking up tutorials but they all seem to be for CS3 (I am using Flash 8).
I currently have no code whatsoever to share, since...I don't know where to start =/ . Source codes would be appreciated, but most of all, I'd love a link to a tutorial or past thread that explains in detail (and layman terms...) how to do something like this, since I want to learn as I go.
I am creating interactives that are interfaced via touchscreens. When someone holds their finger on the screen for more than a few seconds, a settings pop-up appears where the zoom, etc. can be changed in flash. Is there a way to disable this? I use flash cs3 - as2.
I'd never used FileReference on a domain protected by htaccess and htpasswd. I'm getting I/O and Stream errors when my SWF is hitting those PHP scripts. I know I can host the PHP on an unprotected domain, but I'd prefer not to do that.
I'd never used FileReference on a domain protected by htaccess and htpasswd. I'm getting I/O and Stream errors when my SWF is hitting those PHP scripts. I know I can host the PHP on an unprotected domain, but I'd prefer not to do that. Is there a Security item I can use to get past the Errors, or maybe something in the PHP?
I'm using Macromedia Flash Professional 8 at the moment, and I'm fairly inexperienced with actionscript and most Flash processes. What I'm looking to do is create a game of sorts where characters appear on either side of the screen and a dialogue box appears at the bottom with text scrolling across every time the player clicks "Next" or whatever, and the characters' mouths move and their eyes blink as the text scrolls. We're using voice actors so we'd put an audio clip at the start of each piece of dialogue.
So I want to read http streams using flash tcp sockets. I do not really need the http header at all - all I need is body which contains flv. so how to read http response body into byte array using flash sockets?
I'm attempting to load an external SWF that's hosted on a site into a local SWF file. The external SWF is in a password-protected directory using htaccess.
Here is the code I'm currently trying to use:
var loaderUrlRequest:URLRequest = new URLRequest("http://www.my-website.com/externalFlashFile.swf"); loaderUrlRequest.requestHeaders.push(new URLRequestHeader("Authorization", "Basic
I am having a scenario where I need to access a service but when accessing it, I get an HTTP authentication popup of browser. I don't the users to see this. I talked to a guy working on same thing in some other technology and he mentioned that they are using Digest Authentication. I need to know how this can be achieved in Flash.
I need to authorise my Flash game (which runs on Facebook) users against my game server. I'm able to get their data like id, access token, etc, from Facebook on the client (I'm using the Flash Facebook API) but I'm not sure how to authorize them on my game server (e.g. do a login with a database query). One scenario that I have on my mind:
If I could get the same access token from Facebook on both the client (which I already do) and the server (with, for example, a redirect URL, which I tried but does not seems to work), then I could easily compare the two tokens (together with the user IDs) and thus authorize the user. UPDATE To put it simpler, I want to catch the token that is returned from Facebook on the server-side before it gets to the client (it can be a simple PHP script that parses the URL token parameter). Next, store it in the DB on the server, and when the client queries the server, I can do the comparison.
I am creating a website which will contain both ASP.NET pages and a Flash applet.I want to encapsulate my business logic in a WCF service which will be exposed through two endpoints: One accesssible over the Internet through HTTP(S), for use by the Flash client, and one accessible within the data center for use by the application servers.If this does not seem like a good approach, then stop me here; otherwise, I'll move on...
The question is how to authenticate requests coming from the Flash client. Since I don't want to store the user's password in a browser cookie, don't want to send the password with every request, and don't want to have to use HTTPS after the initial login, I plan on using a token-based authentication system. I also don't want the user to have to log into the Flash client after already logging into the site itself, so I plan on using Javascript to pass the token to the Flash client when it starts.
I know WCF supports using the .NET Framework's built-in security framework (System.Security) to enforce access control, and I would like to take advantage of this.The question, then, is: How do I pass the token to the WCF service when it is called by Flash, and how do I process the token on the server? WCF has an "issued token" authentication mode, but it appears this is intended to be used in a full-blown federation scenario with a Secure Token Service and SAML tokens--a bit more complexity that I really want. It is possible to use this mode with my own "simple random-string" tokens? If so, how? Keep in mind this needs to be compatible with Flash.I could potentially pass the token in a header (either a SOAP header or an HTTP header). In this case, once I've determined which user is making the request, how do I inform the framework so that the System.Security checks will work?Is there a different approach altogether that I should consider?Anything that avoids sending passwords in every request, lets me use System.Security, and works with Flash is a possibility.
i have a flash application connected with a script on a remote server(X)different from the server hosting the website(Y)the application on server X needs to get some user information so i need to identify the user by what i have in the cookie
remote server X will get those informations from server Y is there any way i can get the user name or user id from the CAKEPHP cookie var?the authentication is the one found on cakephp website
What I would like to do is to use ASP.NET impersonation to authenticate a Flash app as a user in IIS so that the file dependencies related to the flash file ( XML config files, and PHP API calls ) are not anonymously accessible when users try to access them directly through the URL. So, instead of displaying the contents of an XML config file, it should tell the unauthenticated user they do not have permission to view the file.
Is this possible? Right now I'm looking into request headers and the settings in IIS for authentication.
So I found out how to use Basic Authentication through help posted here. The problem I'm running into is that even though the flash app sends the appropriate request. Which is handled fine in FF, Chrome, and Safari. It still displays the login pop-up box for Opera and IE. Does anyone know why IE and Opera behave differently with Basic Authentication?
it there any way to create an advanced password authentication in flash ? I saw the tutorial here :[URL] but I want to take it to the next level an create a more advanced authentication that will draw the passwords from a database or something external ( asp, php ). what is the most secure way to do it ?
As I said once before I'm making a dialogue based flash game.I'm relatively new to flash, so I've been having to scavenge for bits of code for what I want to do...-------Right now my situation is this -When a player "talks" with a character by pressing the "talk" button I want them to be able to pick up at the conversation point they were at last time. Not a save file, but more of a progression,so if they were to explore other parts of the world and come back to the same character, they'd have to click on the same "talk" button, but //still// be advanced in their dialogue tree.
Is there a way to do with with action script code?Something that will tell flash, "Oh, this is where we left off, I'll go to the next frame of dialogue" when players clic on the "talk" button?My only idea to do something like this is quite a hassle -make a variable named "times talked to" and have the button depended on this variable, and make it gain a point every time it is pressed,but I'm under the impression that this effect can be achieved without something like this.
I'm using flash cs4 on a mac and I need to embed some characters to support greek, and probably a lot of other languages. The problem is, my Character embedding dialogue box is empty! There's nothing in it at all... I'm using Tekton Pro as the font for that dynamic text box, I tried using something more basic, Arial and Helvitica didnt work, still nothing to embed. I know the phrase that will be in it, at least the first one, when I put it in the "Include these characters" box and reran, all the dt box would show is an apostrophe. I put the phrase into the dt filed itself and "autofilled" it did the same thing. I also tried doing the same with the % character version ie %B6, it picked up that they were characters but still wasnt displaying right. I'm diverging.
I want to send a request to my Zend AMF to Open a Dialogue Box for a File Download.The process:Send a request to the Zend Server from my flash App, process the MYSQL results with PHP, then send the result to the browser as a file download (.csv) AND a result true or false to the appI have the code working just fine outside of the Zend Environment, but of course, when i go to echo/print the file - it sends back to flash with nothing happening.Is there any way around this?
I'm using flash cs4 on a mac and I need to embed some characters to support greek, and probably a lot of other languages. The problem is, my Character embedding dialogue box is empty! There's nothing in it at all... which is... problematic.
I'm using Tekton Pro as the font for that dynamic text box, I tried using something more basic, Arial and Helvitica didnt work, still nothing to embed. I know the phrase that will be in it, at least the first one, when I put it in the "Include these characters" box and reran, all the dt box would show is an apostrophe. I put the phrase into the dt filed itself and "autofilled" it did the same thing. I also tried doing the same with the % character version ie %B6, it picked up that they were characters but still wasnt displaying right. I'm diverging. get that Char embed box to have chars in it... I don't know why its empty.
I'm running into an issue with Uploadify. I have put Uploadify into my app and all works fine in dev (using the VS web server). All worked fine and checked until I deployed the app into my test environment which uses Integrated Windows Authentication. When I actually go to upload the file, the browser brings up a login prompt. At this point, even if you type in the correct username and password, the request seems not to complete and even if you tell the browser to remember the password it still brings up the login prompt.
When this started to occur, I decided to spin up Fiddler and see what was going on. But guess what, when ever Fiddler is running the issue doesn't occur. Unfortunately I can't make running Fiddler a reuqierment for running the app. I know there are some issues with Uploadify/flash when using forms authentication but I didn't think they carried across to Integrated Windows Authentication.
I have been using this tutorial to get RPG text boxes in my game. So far, so good. The RPGtext.as I'm using comes from that tutorial, and hasn't been altered, while I'm calling the var arrays containing the character speeches from yet another document class. Something like this:
[Code]....
The dialogue begins and it's all good. Now, here's my dilemma: Is there a way to "shut down" the rpgText movieclip when the Dialogues.d1 has no more text to provide? Each time I press the rpgText movieclip, it refreshes with new text, but when it reaches the final text, I want to be able to press it and make it go away (remove movieclip from scene, something like that).
I tried the "if (Dialogues.d1.length == 0)", but it doesn't work. Is there a way to detect if the Dialogues.d1 has reached its final sentence? Will it be necessary to alter the rpgText.as?
I think I remember hearing that you can trigger a java alert message from within actionscript out to the html page but whats the code to do such a thing?
I need a way to be able to download a file without the prompt of save as using filereference i need to download this file, manipulate the file and then later on, upload it back to the server!
Authentication is performed with Basic auth over SSL (although the password inside the basic auth is SHA-2'ed). The issue is that using basic authentication for the Flash client is causing the standard browser log-in box to appear because of "WWW-Authentication: Basic" in the header. Flash is unable to bypass this by manually setting the Authorization header prior to the request.Other clients need to be able to authenticate via the existing mechanisms, so rewriting the authentication logic would not be ideal.
I have the idea that the authorization headers sent to and received from flash client could be dynamically rewritten to use another name for Basic auth which would cause the browser not to understand the auth mechanism and not present the dialog box. Authentication headers to and from Tomcat could be rewritten from "WWW-Authenticate: Basic" to "WWW-Authenticate: PretendBasic" but ideally the built in container security could still handle the basic auth after the rewrite.
I wrote a filter to rewrite inbound headers as "WWW-Authenticate: PretendBasic" as "WWW-Authenticate: Basic" hoping the next filter chain would be auth and the request would be handled as normal. Unfortunately the Servlet specification states that a filter cannot be inserted prior to authentication. I think the only possibility of this working is to create a stackable JAAS authentication module that would first perform a header rewrite on requests if coming from the Flash client, and then pass authentication through to the existing container managed security systems.
