> I did a search (which, I'm ashamed to admit, I should have > done before posting) and found iAuth, and it looks good. Does > anyone have any experience with it? Does it consume a cf > handle for the duration of the download, or does it simply > check the user's credentials at the door and then hand off > the file to IIS?
The latter. It runs a CF script of your choice, which simply tells it whether the user is authorized. Then, it returns the file. Of course, this will only work if you're using IIS and Windows. I don't know if there's a similar alternative for Apache. However, another approach that will work regardless of web server is to direct the user to a script that will check their authentication, then create a symbolic link to the directory or file in question, then redirect the user to the URL corresponding to the symbolic link. You would then have to clean up these symbolic links after some period of time, so that they're no longer available. This is easier to do with Unix than Windows, since Unix supports symbolic links to files and Windows only supports symbolic links to directories, but is doable under either environment. > You think that by now Allaire/Macromedia/Adobe would have > come up with a solution for this. Files are only getting > bigger, and more and more people are doing file management > online. I would love them to create a tag, or perhaps update > cfcontent, made specifically for dealing with securing non-cf > files that didn't consume cf server resources... just > authenticated to the programmer's auth scheme and then hand > it off to IIS or Apache or whatever. Seems simple enough. http://www.adobe.com/go/wish/ Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Upgrade to Adobe ColdFusion MX7 Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:267165 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
