Hello Nirav and Thierry, Thanks for your feedback.
I think my biggest problem is understanding the API and how it should be used. Right now, i've managed to register my authentication helper and the class is being instantiated and i can see the 'formatRawRequest' method being called on my helper class. But that's as far as i've gotten so far. The response is always failing with a 'Unauthorized (401) - The request requires user authentication' error. Guess i need a bit more info on the process flow, what methods should be overloaded, classes extended etc. Right now, my application is just using a ChallengeAuthenticator with the custom scheme specified. Is this correct? Should i be extending this class and overriding some sort of authentication mechanism? I was hoping to do most of the work in the 'plugin helper class', but right now, its always failing. Does the helper have some sort of hook i can use to specify if a request is valid or not? Also, wrt the helper class, what bearing if any does the 'clientSide' and 'serverSide' flags have on the process flow or is it just a mechanism for determining if a client should be used in clientside or serverside validation? Regards, --KD ------------------------------------------------------ http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2432569
