Securing openamf service with HTTP Basic Auth

Hi all,

 

Does anyone have any tips on how I could secure my OpenAMF services?  

 

My goal is to initially be able to have call level authentication and
authorization against my application user database.  Later the
authorization should be data (call parameter) specific, but that can
wait.  I'd prefer to use HTTP Basic Auth, grab the user credentials,
authenticate and move on.

 

But I can't see how to do this.  My only idea so far is to pass the user
credentials as parameters in the method invocation...which is inelegant.

 

Currently my openamf-config.xml file is using the AdvancedGateway, and
there is mention of state-bean tag in the examples download...but...I'm
just a bit to dumb to figure it out.

 

Any high level advice would be appreciated.

 

Thanks in advance and Happy New Year!

 

Stu

 

 

The little details:

 - Flex 2 AMF0 client

 - Tomcat 5.5

 - Spring 2

 - Java 5

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

_______________________________________________
Openamf-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openamf-user