Aside from auth challenges, in case you're not aware, the Player can not issue 
PUT, DELETE or HEAD requests due to limitations in the browser APIs that it 
uses for HTTP support, as well as security considerations. Setting request 
headers also presents some challenges due to security issues, and response 
headers are not available in the browser players.

If your server side methods work OK with just GET and POST requests, keep 
forging ahead.

Seth

From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of 
rydellfinn
Sent: Monday, May 12, 2008 12:38 PM
To: flexcoders@yahoogroups.com
Subject: [flexcoders] Authentication against a RESTful web service

Hi all - 

I have written a RESTful web service using Java (Jersey). I would
like to have write a Flex 3 front end to make use of this service. 
What is the best way to have my Flex 3 login page authenticate against
my web service?

I have been trying to use Basic Authentication with the HTTPService
and URLLoader, but there have been a lot of recent security changes
with the flash player that have made this very difficult. And before
I go down that road any further, I thought I'd step back and ask the
more generic question of what is the best way to get authentication done?

At this point, I'm thinking of 'best' defined as, moderate security
that I can implement in a couple of days.

Thanks to everyone (or anyone!) who responds.
 

Reply via email to