Aside from auth challenges, in case you're not aware, the Player can not issue PUT, DELETE or HEAD requests due to limitations in the browser APIs that it uses for HTTP support, as well as security considerations. Setting request headers also presents some challenges due to security issues, and response headers are not available in the browser players.
If your server side methods work OK with just GET and POST requests, keep forging ahead. Seth From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of rydellfinn Sent: Monday, May 12, 2008 12:38 PM To: flexcoders@yahoogroups.com Subject: [flexcoders] Authentication against a RESTful web service Hi all - I have written a RESTful web service using Java (Jersey). I would like to have write a Flex 3 front end to make use of this service. What is the best way to have my Flex 3 login page authenticate against my web service? I have been trying to use Basic Authentication with the HTTPService and URLLoader, but there have been a lot of recent security changes with the flash player that have made this very difficult. And before I go down that road any further, I thought I'd step back and ask the more generic question of what is the best way to get authentication done? At this point, I'm thinking of 'best' defined as, moderate security that I can implement in a couple of days. Thanks to everyone (or anyone!) who responds.