Re: Securing openamf service with HTTP Basic Auth

Either of these should work:

1)  write a custom servlet filter
2)  subclass OpenAMF's gateway servlet

On 1/10/07, Stu Thompson <[email protected]> wrote:
>
>  Does anyone have any tips on how I could secure my OpenAMF services?
>
>
>
> My goal is to initially be able to have call level authentication and
> authorization against my application user database.  Later the authorization
> should be data (call parameter) specific, but that can wait.  I'd prefer to
> use HTTP Basic Auth, grab the user credentials, authenticate and move on.
>
>
>
> But I can't see how to do this.  My only idea so far is to pass the user
> credentials as parameters in the method invocation…which is inelegant.
>
>
>
> Currently my openamf-config.xml file is using the AdvancedGateway, and
> there is mention of state-bean tag in the examples download…but…I'm just a
> bit to dumb to figure it out.
>
>
>
> Any high level advice would be appreciated.
>
>
>
> Thanks in advance and Happy New Year!
>
>
>
> Stu
>
>
>
>
>
> The little details:
>
>  - Flex 2 AMF0 client
>
>  - Tomcat 5.5
>
>  - Spring 2
>
>  - Java 5
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share
> your
> opinions on IT & business topics through brief surveys - and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>
> _______________________________________________
> Openamf-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openamf-user
>
>
>

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

_______________________________________________
Openamf-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openamf-user