I am building a FLEX web application that also has a payment module where the user needs to enter his credit card details.
The whole Flex application runs on HTTP. However, whenever the user lands on a page where we ask for credit card details, we want these details to be sent over HTTPS.In this page we need information from the model of the application, because it holds certain selection the user did, the state the application is in, etc.
Do I need to make this page a Module that runs on HTTPS?
Or can I just configure the specific 'credit card' services (we have a JAVA back end) so that these run on HTTPS?
My swf is being served via http protocol. I don't really see this being easily changed. There's a resource that a website has opened up via their api that I need to access but it is using https protocol. Because of this my swf can't access the resource because of security settings.
Option 1 would be to serve my swf via https. I can't do this at the moment.
Option 2 would be set secure="false" property of the cross domain policy file. I can't do this, I dont have access.
I've been trying to find the right configuration for supporting both http/s requests in a Flex app. I've read all the docs and they allude to doing something like the following:
I'm running with Tomcat 5.5.17 and Java 5.The BlazeDS docs say this is the best practice. Is there a better way? With this config, there seems to be 2-3 retries associated with each channel defined in the default-channels element so it always takes ~20s before the my-amf channel connects via a http request. Is there a way to override the 2-3 retries to say, 1 retry for each channel?
I'm new to flex. Now I'm writing an flex application. I plan to split my application into some MXML files(Application as the root tag). How can I switch from one mxml to another?BTW, what is the best practice for design large flex application? Just one MXML Application and many MXML component or many MXML Application?
I need to develop the HTTPS application using Flex and Java. But i have idea about remote objects or HTTPServices. which one is the best for developing HTTPS application.
I am finding that if I load Flash from a HTTPS page [URL] and try to make a request within ActionScript 3 to [URL] the request does not go through. Same goes for the opposite (accessing https from a http-loaded flash script).
The request is failing, the requested data (passed from a PHP script) is not loading.
Now at first I assumed the trouble was with cross-domain policy files, but I have fixed that issue (I think).
Is there any security policy in Flash (CS5 btw) on HTTP vs HTTPS requests based on where the script is loaded from?
I have a Flash Movie (SWF) that is consuming a .NET WebService (located on the same domain) and in my Test environment everything works perfectly (Test env is all HTTP).
When deployed to production (All HTTPS) an issue occurs when trying to access the WebService from the Flash movie.
A new WebService object is created with the HTTPS url passed to it.
myWS = new WebService("https://mydomain/path/to/webservice")
As I watch the HTTP traffic in FireBug I can see the Flash movie making a POST request (passing along the SOAP data) as HTTP (not HTTPS as I would expect). This HTTP requests hits the firewall which forces a 302 Redirect to HTTPS. After this redirect occurs, Flash/Firefox re-sends the request to the HTTPS version of the URL, but as a GET request (thus losing all the SOAP data and making the call to the WebService invalid).
I am trying to figure out how/why a Flash WebService would call a WebService using HTTP even though I am specifically passing it a HTTPS url.
I've followed the Adobe tutorial on how to make a Facebook App with Flex.
If I access the page from the server, everything works.[URL]..But when I access it trough the facebook app [URL]..I get the following error:
The page cannot be displayed The page you are looking for cannot be displayed because an invalid
method (HTTP verb) was used to attempt access.try the following:Contact the Web site administrator if you believe that this request should be allowed. Make sure that the Web site address displayed in the address bar of your browser is spelled and formatted correctly.HTTP Error 405 - The HTTP verb used to access this page is not allowed.Internet Information Services (IIS)Technical Information (for support personnel)
Go to Microsoft Product Support Services and perform a title search for the words HTTP and 405. Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled Setting Application Mappings, Securing Your Site with Web Site Permissions, and About Custom Error Messages.
I have a standalone flash application which needs to access a https://.. url for authentication purpose. BUt I am not able to connect to the URL. What can be the reason?
Is there any way to use an Adobe AIR application as a local http server? i.e. Adobe AIR application listening to http://localhost:8020 and I'm able to use a browser to access the application? If I can, is it true or pseudo multithreading? Is there any library or code that I can look for?
I did an application here to record the user's webcam and store an .FLV at my applications folder. That's ok. But I want to retrive this .FLV using HTTP mode, to load the .FLV progressively, not by streaming. Got it? For example, if I record a user webcam called "myWebcam": myVideoClass.load("[URL]"); Using http (progressively), not rtmpt (streaming). There is some way to do that? Or to move the file from applications folder to webroot?
my flash application requests an xml information in a php site.... How would I monitor if my flash application is still requesting a data or not? because sometimes my application stops requesting
Is it possible to use the flash.net.NetConnection object to connect to my Flash remoting enabled web application over HTTPS within Tomcat or any other servlet container?
I am using the SpiceFactory cinnamon project for amf remoting and have searched for examples of using HTTPS but see only the reference to a proxy type in the NetConnection object.
If someone could provide a reference or example that would be awesome. Or if it is not possible using the flash.net.NetConnection object are there any recommendations of how to configure HTTPS for the spicefactory cinnamon library.
I've changed the protocol for my flex app from https to http and flashplayer still wants to download the crossdomain.xml using https though with the port for http. [URL]..
Is there a way to inspect HTTPS traffic from Flex applications compiled to SWF files?I'm trying to use Fiddler for this, have added DO_NOT_TRUST_FiddlerRoot to my Trusted RootCertification Authorities so my IE now can access other HTML sites that would normally complain about untrusted certificate. However, the HTTPS traffic from the SWF file still doesn't appear in Fiddler and, in fact, the Flex app wouldn't work (HTTPS with a self-signed certificate is not supported by Flex apps I believe). Is there a way around it?Update: To be clear, I am interested in the traffic between the SWF file running under Flash Player and the server (typically, Flex components like HTTPService will be used for this). The SWF file itself can be served via HTTP or HTTPS, it doesn't really matter.Clarification 2: Don't assume that the source code is available for the SWF file. If it was, Flash Builder 4's Network Monitor could be used.
I'm trying to configure BlazeDS to work over HTTPS. We've got Apache in the front that is set to redirect all http traffic to https. Apache then communicates with the application (a JBoss AS 5.1) via http. I've tried a lot of configurations for BlazeDS, and finally the following solution worked for me:
The thing here is that in my-secure-amf channel, I use mx.messaging.channels.SecureAMFChannel in the channel-definition, and flex.messaging.endpoints.AMFEndpoint (not flex.messaging.endpoints.SecureAMFEndpoint). This has probably something with the Apache-Jboss setup to do, but I haven't found anything that explains what the different tags actually define. To get some sense in all of this, what happens when defining channels and endpoint, using different urls and classes?
I want to make an https call using HttpService. My code is working perfect when the url is http, but when i can the url to https is gives me the following error [code]...
I'm having an epic amount of difficulty trying to get a result from a httprequest to a https address.I'm loading a policy file from the address but I'm still getting the 2048 security error.I load my policy file like so in my preinitilize handler.
private function preint(e:FlexEvent):void { Security.loadPolicyFile("https://api.soundcloud.com/crossdomain.xml");
I am developing a flex application with flex 4.1 sdk and java backend (runs on Glassfish 3.1 via http). For security reasons I decided to move my authentication process to https until a session id is obtained. Therefore I changed the filter settings to use ssl for login and logout pages(just two pages due to performance reasons. The data-size sent to client is large and I do not want to slow down the system). Glassfish forwarded these pages to 8181 port (which is HTTPS port). Everything is ok for the java part. However flex defines the 8181 port as a different domain and then problems arise. Due to flash's same-origin policy it cannot load the secured content. Normally a crossdomain.xml is the solution but I am accessing content of the same domain through a different port. What will be the solution ?
We're trying to upload a file from a flex client to a JEE app. In a full HTTPS environment JEE server is JBoss 5 Using BlazeDS 'Custom' authentication (username and password are entered through a flex form) Using BlazeDS per session authentication In regular AMF calls, we can access user principal and use role mechanism. However, in our upload servlet, we have no access to user principal. request.getUserPrincipal() // returns null
I have a html paga which loads a flash(flex) swf file. Using https it loads successfully with Chrome, Safari and Firefox, but not with Internet Explorer.Another page, a simple aspx page, does load in Internet Explorer using https (and no flash in it).Haven't found anything so far on the internet to solve this... Anyone?UPDATE: When I right click on the white screen, 'About Adobe Flash Player 10...' appears... so Flash is loaded. Also, in Charles (http sniffer tool) I can see that the swf is loaded over the network.
So, apparently, Flash Player is running inside my html page, the swf is loaded over the internet but the swf is not displayed in internet explorer browser... Very strange. How can I debug this further to see what the problem is?Meanwhile, in the left down corner, IE keeps on saying: 'Waiting for https://....In all other browsers it works like a charm.You can see that IE shows a Certificate Error, but that's also the case in other browsers. I already clicked on Certificate Error to install the Certificate, but with no success.
i have a flex file upload application over https it works fine on all IE browsers. Recently a client with IE9 reported a complaint that she's not able to upload files. can see the error generated is IO Error #2038. The adobe documentation says 2038 is File I/O Error.This error occurs when an application can't get file size, creation date or modification data using the FileReference API.
All i can think of is browser issues like, browser cache, some new configuration in IE9 am unaware of or permission on the client directory.
I am trying to access a .Net service which requires an authentication header. If WebService is used it works fine. But when it is accessed using HTTPService it throws error. The project is already done by somebody else using HTTPService. Now changing to webService requires some time since there needs to be modification in a lot of files.
Below is the SOAP envelop required by the service.
I'm trying to develop a simple mxml Flex application to start Skype from the AIR/Flashplayer runtime. Is it possible to get back events from a native Windows application? In the simple example of Skype, the OS returns control to the Flex app when Skype exits. But what about native applications which have their own event model and wants to communicate with the Flex event model. For example, a Face detection system which shows "Hello" on a Flex app when the camera detects a face. Can this be done in the current Flex framework?
