Flex :: Zend AMF Implementation And AMF Protocol Security?
Jan 15, 2010
I have a Flex frontend connecting via RemoteObject to Zend Framework's Zend Amf. This is my only means to transport data between client layer (Flex) and the application and persistence layers (LAMP with Zend Framework).Some ways I can address security are as follows:
I can address TLS by using mx.messaging.channels.SecureAMFChannel in my services-config.xml file and ensuring Flash player is loaded into a HTTPS wrapper and is in fact using HTTPS since the AMF protocol is layered on top of HTTP RemoteObject has a setCredentials method with which I can pass AMF authentication headers to protect user related data. Assuming TLS was actually secure I can expose methods on the endpoint after authenticating the User.I can protect against cross-site scripting and other FLASH vulnerabilities with a properly set up crossdomain.xml how to I protect my endpoint against another AMF consumer? For instance, if there were another AMF consumer (not Flash so not bound by crossdomain.xml and Flash sandbox security) other than my Flex client that knew my endpoint, what would stop it from using methods that the endpoint exposes?
As far as I know I essentially need a way to authenticate my Flex application against my Zend Amf endpoint. After AMF consumer authentication, I have some of the security mechanisms I mentioned above to protect certain pieces of data (like User authentication). I can not embed some sort of authentication mechanism into my Flex swf because the swf is vulnerable to decompilation (the swf can not be trusted). While sensitive data is protected via User authentication the unprotected data is hardly public but as far as I can tell is totally open for public consumption.
View 2 Replies
Similar Posts:
Aug 10, 2011
I've been searching for the last couple days but can't seem to find a basic example of what I'm looking for. I'm developing a Flex 4.5 app and in it I have a viewstack of 2 components that use some of the same services. Currently the only way I can get the app to correctly use the web services is by defining 2 different web services that use the same PHP web service file. For example: I have an app, and within it I have a viewstack with tab navigation of 2 components: #1) retrieve a list of all Salary Employees, and #2) retrieve a list of all Contractors. Currently to get it working I am defining a UsersTableEmployees webservice within component #1 and a UsersTableContractors webservice within component #2, but they both point to the same PHP class, and only differ in the arugment value I pass to them. Ie, getUsers("employee") and getUsers ("contractors"). Of course this is not best practice.
Searching StackOverflow and Google gives me many results about ColdFusion and MVC (example What's the best way to share data between components in Flex?), but I'm still confused. Can anyone here point me to a basic example (even sample MVC) and source code of an app that uses Zend AMF and allows different components to call common web services?
View 1 Replies
Oct 20, 2010
I've changed the protocol for my flex app from https to http and flashplayer still wants to download the crossdomain.xml using https though with the port for http. [URL]..
View 3 Replies
May 24, 2011
I am working private network.This alread developped product which implemented using TCP(client server technology). Existing product is as follows
-There is a UI which is developed using flex, where user can see video or snapshot
-There is a server which is developed using c++,which redirects request from UI to gateway.
-There is gateway which is connected with the Camera,which stream video to UI through server.
Now we wanted to add p2p technology to existing client server.So it will support TCP as Well As UDP.Presently we are exploring flex and XMPP to implement the p2p.as newer version flex of flex support p2p using RTMFP, but thats the propriety protocol of adobe.if we use RTMFP we need to change all the existing code that we dont want.I wanted to implemented to p2p using flex client(UI) which will use XMPP to communicate with Gateway and Server. Is it possible to use XMPP from flex code.Will XMPP support UDP p2p or not.
View 1 Replies
Feb 8, 2011
I have a Flex-Page which connects to a MySQL-DB through PHP (Zend). I run the Flex-Page on an IIS-Server (Windows Server 2008 R2) and it works. But the problem is, that i specified the web root to the C:inetpubwwwroot directory (there php is running). On the server i want it on another directory.(Now i have the main Flex Page in the directory für the webserver, and the php files are in the wwwroot directory).
When i specify the web root to an other directory, nothing works, not even on my local machine.
View 1 Replies
Feb 5, 2010
I'm working on a school assignment in which I have to make a basic CRUD (create, read, update and delete) content management application using the Zend AMF framework in FLEX.Basically I create a mock database and have flex print the data from the database into a data-grid. I need to also have an add form, edit+update feature and delete feature. As of now I have FLEX printing all the database info into my data-grid and my add form works as well as my delete button. My problem is I cannot get the update function/query to work. You know:
(UPDATE myTable SET valueName='".$variable."')
What happens is I have it programmed so that when you click on any row in the data-grid, the information is printed back into the add form. Here you can change the values and hit the 'update button' (not the add button) to run the update query on the php file.So my mxml looks something like this:
PHP Code:
<mx:WindowedApplication xmlns:mx="http://www.adobe.com/2006/mxml" layout="absolute" creationComplete="{amfcall.getDatabase()}">
<mx:RemoteObject id="amfcall" destination="MyPHPclass" source="MyPHPclass" endpoint="http://localhost/FlexAMFCMSapplication/index.php" showBusyCursor="true" />
[code]....
So basically I can send the ID over to the PHP but not other values along with it, in this case the date time and name. How can I send over these edited values so the update function actually updates them?I'm assuming my update function is wrong in either the mxml or the php or both.
View 4 Replies
Feb 10, 2010
i have a question about Zend Framework and mainly the model part. I know there is no abstract model class and understand why. I red a lot of blog posts about it, but couldn't find any example that would clearly explain it to me. I'm building a very basic application. Lets imagine we have just three tables.company(ID, name, street, streetNo, Town), meta(ID, name, description), company2meta(ID, companyID, metaID, value, note). All types of realtionship are there (1n n1, nm). The a need also services (amf) with Value Objects. So, here is what I think:
[Code]...
View 1 Replies
Apr 11, 2011
I've got a simple app that is currently getting information form a database and just displaying the content into a datagrid.
Instead of having this information displayed in a datagrid, I'd like to display it in a couple of labels (first name, last name, phone, etc.), but I'm not really sure how to.
Currently on creationComplete I call my php query function - which looks like this.
public function getPeople() {
return mysql_query("SELECT * FROM tbl_people ORDER BY pers_name ASC");
}
[Code].....
Eventually my query will be modified and will only ever return 1 row from the database. So how do I get the results to display in labels instead of the datagrid?
View 1 Replies
Dec 3, 2011
I'm using Flex 3.6 and ZEND AMF version 1.11
I have an array that shows in my trace using trace(ObjectUtil.toString(event.result))[code]...
View 1 Replies
Dec 20, 2009
I'm having trouble with an AS3 AMF RemoteObject request that is hosted on App Engine. I have a crossdomain.xml file in the root of the domain, and also one at the remoting endpoint.Here are the contents of the root crossdomain.xml:
<?xml version="1.0"?>
<cross-domain-policy>
<site-control permitted-cross-domain-policies ="all"/>[code].....
Loading the swf file and testing it on my machine works just fine... I think that may have something to do with me having the debugger version of Flash Player. When I push it up to App Engine to make it public, other clients access it and get a Client.Error.MessageSend Channel.Security.Error error Error #2048 url: http:[url].......I am using Flex 4 beta, and the App Engine Python runtime. I have tried full wildcard in the crossdomain, and even accessing the data endpoint at a relative URL so as to avoid this error.
View 1 Replies
Jul 6, 2010
I am using Flex and php to develop my project. Everything works great in my local machine.However, when I upload my files to my serverI got the error when loading my flex application.The pop-up error message is
send failed
channel.connect.failed.error
Netconnection.call.Badversion: url:
[code].....
View 4 Replies
May 11, 2009
I'm working on a new project in Flex with a CakePHP backend and since I'm using Mate, I wanted to use the RemoteObject stuff it does to call CakePHP.First I tried just doing one call at a time in CakePHP but I saw that that would mean a lot of endpoints, so I looked into some like amfphp for cakephp. I saw that Zend AMF is now the successor to AMFPHP so I wanted to try to integrate it.
I probably spent 8 hours on the final solution that is probably 10 lines of code.So without further ado I give you FlexibleCake: a CakePHP controller that acts as an AMF Endpoint and is able to instantiate and call any controller / method. I also built a "tester" or "explorer" app that allows you to send requests to the end point and visualize the result.
[URL]
PS there where some changes I had to make to the core CakePHP classes to make it work. It only involved modifying the comments in the model.php class I believe (since Zend AMF reads the comments to gather metadata for the functions called).
View 5 Replies
Feb 8, 2012
what's the best and shortest way to get this information?
i've read about BrowserInvokeEvent which contains a boolean of the sort - [URL]
yet i havn't been able to implement it.
View 1 Replies
Jul 26, 2011
In flex (flash builder 4) I have a Date() property that I am passing to Zend AMF (php) and I want to store that (as well as other data) in mongoDB. Mongodb is complaining about the date because it comes across as a Zend_Date object, which appears to be an object containing several properties and Mongodb is saying that it can not accept blank properties. So, I take that to mean it needs to be converted to something else before I can store it? If so, how do I do that?
At the moment I have taken the approach of converting the Zend_Date object in to a date string to store it (in php):
$object->readyDT=date("m/d/Y H:i", strtotime($object->readyDT)); //convert to string
That works fine, and I have a string in mongodb of that date. Now, when I load the date from MongoDB, I need to convert it back to a Zend_Date so it properly converts back in to a Date() object in flex (I have to check that it's not blank or it throws errors in php):
if (isset($object->readyDT) && $object->readyDT!=="") $object->readyDT = new Zend_Date($object->readyDT, 'MM/dd/yyyy hh:mm');
This all works, but it seems like there should be a much easier way to take a Date() from flex and get it stored in MongoDB via Zend AMF/PHP. ?
View 1 Replies
Sep 1, 2011
I followed the instructions in this tutorial to set up Zend AMF as a way of passing data from my flash app to my PHP app:So I have the directory structure and everything as described there. This is my gateway controller:
class Gateway extends CI_Controller
{
function __construct()
[code]......
View 1 Replies
Jul 11, 2010
I need to develop client server application that involve gaming. I have no experience in flash and I was reading about the AMF3 protocol that is compact and fast, is it better than xml/json for data exchange? Also I need it to be on port 80.
View 2 Replies
Sep 16, 2009
is there any way to build html WYSIWYG in flex like Microsoft front page? i didn't found any thing on the web like this? second question is : is there any good rich text editor that support text completion function like ( like code IDE 's )
View 1 Replies
Nov 4, 2009
How do I do this in Flex 4?
<mx:RemoteObject id="srv" destination="product" channelSet="{channelSet}"
fault="faultHandler(event)">
<mx:method name="getProducts" result="getProducts_resultHandler(event)"/>
</mx:RemoteObject>
I got
Could not resolve <s:Method> to a component implementation.
When trying to do this
<s:RemoteObject id="roMajor"
destination="MajorSrv"
fault="Alert.show('Remote Object Error')" >
<s:Method name="AddMajor" result="roMajorResult(event)"/>
</s:RemoteObject>
View 1 Replies
Jan 15, 2010
In my flex application I am using httpService to connect to the server, for the response from server I wanted it to convert the http response to flex object, Is there any remote implementation availabe for the above purpose
View 2 Replies
Mar 5, 2011
i created project with flexmojos maven archtype..i used flexmojos:flexbuilder and compile/run with FlashBuilder 4 everything is okay but when i try to compile project with flexmojos i got following error: ERROR] Z:....srcmainflexMain.mxml:[6,-1] Could not resolve < fx:Script > to a component implementation.INFO] BUILD FAILURE
my mxml:
<?xml version="1.0" encoding="utf-8"?>
<s:Application xmlns:fx="http://ns.adobe.com/mxml/2009"
[code].....
View 1 Replies
Jun 20, 2011
I am just looking design patterns used in Flex. Any value object design pattern and how is it implemented in Flex.
View 3 Replies
Jan 24, 2012
I've got a custom CalloutButton component in a package called uiComponents. This custom CallOutButton is needed because I need some more properties in it. This CalloutButton gets added to my MXML like usual;
<uiComponents:MyCustomCalloutButton someproperties here >
</uiComponents:My...>
Now, the enclosed s:calloutContent gets a compilation error, the (almost standard) could not resolve... Naturally, the namespace has been imported.
View 1 Replies
Apr 12, 2010
I am looking for a Flex datagrid component that has features like grouping, sorting, master/detail display, etc. I am having an application in C# that uses XtraGrid suite to achieve the required datagrid features. I am planning to migrate this application to Flex. If there is no flex component readily available with XtraGrid features, then I have to create one on my own
View 1 Replies
Jul 3, 2010
I am trying to create a menu bar with the following items: File, Database, Navigate, Window. However, I am getting an error which I do not understand: Could not resolve <mx:XMLList> to a component implementation. Can anyone explain the error to me? My code is as follows:
<mx:XMLList id="topLevelMenu">
<menuitem label="File" />
<menuitem label="Database"/>
[Code].....
View 1 Replies
Nov 29, 2010
I'm starting a Flex app on a pretty big reporting engine and want to know how best to connect to a Postgres Database. I'd like to create a REST API architecture so I can use the service for more than just the Flex app(mobile possibly).These are my options I've found:
Datatype: either XML, JSON or AMF
Flex Service: HTTPService or WebService
Server(using PHP): ZendAMF, custom json_encode implementation, Zend_Rest_Server
I've got my views all mapped out, and the api functions designed. Basically what I need is advice on which Flex / back-end service combo to provide.
View 2 Replies
May 27, 2011
I am having this error when I try to paste in code of a spark component. The component is a DataGrid and it needs to be a spark and not a mx.[code]The Error:Could not resolve <s:DataGrid> to a component implementation.How can I resolve this error. I need to make my DataGrid into a Spark Component.
View 1 Replies
Jul 25, 2011
Is model injection on the fly possible? In other words,if I ask for a model of the type IPhotoModel, I should get one of its implementations based on the current state of the view. If I am looking at a UserPage,I should get a user-specific implementation of that model.I am looking at a LocationPage,I should get a location-specific implementation.Currently, the only way that I see is introducing a command that specifies the model mapping, with a concrete one based on the current view state ...
injector.mapValue(IPhotoViewModel, injector.getInstance(UserPhotoViewModel)) or
injector.mapValue(IPhotoViewModel, injector.getInstance(LocationPhotoViewModel))
is this the best way possible? I do not really want to introduce much coupling logic outside of the context, but ...
View 1 Replies
Aug 2, 2011
I just upgraded out Flex project to use SDK version 4.5.1.21328 and the Flash Builder to version 4.5
All of the sudden, I'm getting several red tags on the Flash Builder: "could not resolve s:State/fx:Script/whatever to a component implementation"
However, the project builds fine with Maven, and seems to work well too.
Does anyone have any information on how to remove these "problems"?
View 3 Replies
Jan 9, 2012
I'm currently converting Flex project currently build by Ant to a project built by Maven.I receive the following error:
Could not resolve <s:SWFLoader> to a component implementation.
In
<s:BorderContainer xmlns:fx="http://ns.adobe.com/mxml/2009"
xmlns:s="library://ns.adobe.com/flex/spark"
xmlns:mx="library://ns.adobe.com/flex/mx">
Seems that there is unresolved dependency. These are my dependencies in the pom.xml
<dependency>
<groupId>com.adobe.flex.framework</groupId>
<artifactId>flex-framework</artifactId>
[code]....
What I must add in the pom.xml file?EDIT: Following does not seems to work, the error stays the same
<dependency>
<groupId>com.adobe.flex.framework</groupId>
<artifactId>spark</artifactId>
<version>4.5.0.19786</version>
<type>swc</type>
</dependency>
View 1 Replies
Jan 22, 2010
I'm trying to get my Flash application to connect via socket to my server, so I need to set up a socket policy file server. It seems like there are various roll-your-own implementations floating around out there, but is there any kind of standard or best practice with what to use?
As an aside, it seems strange that Adobe imposes this restriction but doesn't make something readily available to support it.
View 2 Replies
