Re: [CFCDev] getHTTPRequestData() in pseudo-constructor

[Matt Liotta]

I was meaning to respond to this on the guru list, but your post here 
reminded me.

On Thursday, September 11, 2003, at 03:11 PM, Nat Papovich wrote:

Using the "username" and "password" attributes of the <cfinvoke> tag 
makes
passing the credentials from my cfm pages to my web services facade 
cfcs
very easy. I am trying to have my facade cfcs extend a "security" cfc 
that
will validate the request via some code in its pseudo-constructor 
area. That
way, every method request in my facades will automatically get 
authenticated
by the security cfc.

Sounds like reuse by inheritance, which is considered a bad practice. 
See Sean's blog for recent comments in that regard.

But it appears that if I try to run the function getHTTPRequestData() 
in the
pseudo-constructor of the security cfc, I get an Axis error with a
"faultString" of "org.xml.sax.SAXParseException: Document root element 
is
missing." I have tried moving the actual function call into a cfc 
method and
having the pseudo-constructor call that method, but I get the same 
error.

I don't believe HTTP request data is available to you when a CFC is 
invoked as a web service. This is because Axis is actually handling the 
request and response.

I might be forced to use <cflogin>, but I'd prefer to have a little 
more
control over the nuts-n-bolts. Additionally, the example in the docs at
http://livedocs.macromedia.com/coldfusion/6.1/htmldocs/webser33.htm 
doesn't
work, if I'm reading it right. Sticking the code on that page in
Application.cfm and calling a CFC via web services produces an Axis 
error,
which leads me to believe that the <cflogin> tag does the same thing 
that
getHTTPRequestData() does behind the scenes.

Do using cflogin actually work?

Matt Liotta
President & CEO
Montara Software, Inc.
http://www.MontaraSoftware.com
(888) 408-0900 x901
----------------------------------------------------------
You are subscribed to cfcdev. To unsubscribe, send an email
to [EMAIL PROTECTED] with the word 'unsubscribe cfcdev' 
in the message of the email.

CFCDev is run by CFCZone (www.cfczone.org) and supported
by Mindtool, Corporation (www.mindtool.com).
An archive of the CFCDev list is available at www.mail-archive.com/[EMAIL PROTECTED]