Thanks for that info Doug :) SOAP is rather flaky in Flex, but we're working our way through it. I've got Charles, it works great combined with Oracle's BPEL console to snoop into what's going on between Flex and the world, but when your service is generating nice data but flex chokes anyway, there's not much help available :) Although it seems you're more likely to trap the debugger on various issues in Flex 3 than simply getting a useless "you have a NPE somewhere in the VM but I won't tell you where" error ;-)
And I'll definitely check this thread when we get round to doing security in web services as well. -J On Mon, Apr 14, 2008 at 10:27 AM, Doug McCune <[EMAIL PROTECTED]> wrote: > Here is a recent IM conversation I had with someone who shall remain > nameless. I apologize for the language, but it wasn't even me this > time. > > 4:43:38 PM [EMAIL PROTECTED] <xxxxxx%40gmail.com>: fucking new flashplayer > broke [my app] > and i have no idea why > 4:43:49 PM [EMAIL PROTECTED] <xxxxxx%40gmail.com>: i didn't think any of > that security shit > applied to us > 4:43:59 PM [EMAIL PROTECTED] <doug%40dougmccune.com>: security! yay! we > love it! > 4:48:02 PM [EMAIL PROTECTED] <xxxxxx%40gmail.com>: aha. fuckers. > 4:48:03 PM [EMAIL PROTECTED] <xxxxxx%40gmail.com>: Allowing SOAPAction > header for web services > > When using Flash Player in conjunction with web services, make sure > the SOAPAction header is allowed. > 4:48:15 PM [EMAIL PROTECTED] <xxxxxx%40gmail.com>: hidden at the bottom of > some technote > > So maybe check to make sure the SOAPAction header is allowed? I'd say > check all the recent stuff with the April security release of Flash > Player and go over every tech note with a fine tooth comb. > > Doug > > > On Sun, Apr 13, 2008 at 5:21 PM, Douglas Knudsen > <[EMAIL PROTECTED] <douglasknudsen%40gmail.com>> wrote: > > > > > > > > > > > > > > Service Capture, trace(), and some chicken bones :) Seriously, I'd > invest > > in Service Capture or Charles to sniff your SOAP. You can certainly use > > Wireshark or FireBug too, but not for AMF sniffing which smells better > to > > me! > > > > DK > > > > > > On Sun, Apr 13, 2008 at 7:27 PM, Josh McDonald <[EMAIL > > PROTECTED]<dznuts%40gmail.com>> > wrote: > > > > > > > > > > > > > > > > > > > > > I've started getting a 1009 error for no apparent reason when trying > to > > call a SOAP method, and there's absolutely no useful debugging > information, > > it just comes up as a fault event. How is one supposed to track down and > fix > > something like this? I'm stuck on 2.01 so there's no source to rpc.* to > > browse. > > > > > > Any help much appreciated. > > > > > > -J > > > > > > -- > > > "Therefore, send not to know For whom the bell tolls, It tolls for > thee." > > > > > > :: Josh 'G-Funk' McDonald > > > :: 0437 221 380 :: [EMAIL PROTECTED] <josh%40gfunk007.com> > > > > > > > > -- > > Douglas Knudsen > > http://www.cubicleman.com > > this is my signature, like it? > > -- "Therefore, send not to know For whom the bell tolls, It tolls for thee." :: Josh 'G-Funk' McDonald :: 0437 221 380 :: [EMAIL PROTECTED]
