Re: Securing openamf service with HTTP Basic Auth[Viren geprüft]
"Stu Thompson" <[email protected]> Thu, 11 Jan 2007 11:28:45 +0100
| Newsgroups | gmane.comp.java.openamf.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Sean, Thanks for the tip. I've taken the sub-classing route and my initial prototyping looks good. :D Stu ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Sean Sullivan Sent: 10 January 2007 17:40 To: [email protected] Subject: Re: [Openamf-user] Securing openamf service with HTTP Basic Auth[Viren geprüft] Either of these should work: 1) write a custom servlet filter 2) subclass OpenAMF's gateway servlet On 1/10/07, Stu Thompson <[email protected]> wrote: Does anyone have any tips on how I could secure my OpenAMF services? My goal is to initially be able to have call level authentication and authorization against my application user database. Later the authorization should be data (call parameter) specific, but that can wait. I'd prefer to use HTTP Basic Auth, grab the user credentials, authenticate and move on. But I can't see how to do this. My only idea so far is to pass the user credentials as parameters in the method invocation...which is inelegant. Currently my openamf-config.xml file is using the AdvancedGateway, and there is mention of state-bean tag in the examples download...but...I'm just a bit to dumb to figure it out. Any high level advice would be appreciated. Thanks in advance and Happy New Year! Stu The little details: - Flex 2 AMF0 client - Tomcat 5.5 - Spring 2 - Java 5 ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Openamf-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openamf-user ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Openamf-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openamf-user