Thanks Ropu for your hint. I have just looked at the sample in PHP. There they use a BasicSecurityToken to create a token and pass it to the iframe.
What do I have to use in the Java Container? Shindig got classes like BasisSecurityToken and so on. In the UI I have to pass the token to the gadget in the form gadget.secureToken = ... So I think I have to put it there as a String. This means to me, I have to generate the token in the server as a SecurityToken and return a String representation of that object to the web-client to pass it to shindig. Is this right? Which classes Do I have to use in the server to generate this Token and stringify it? I have found the interfaces SecurityToken and SecurityTokenDecoder. But I haven't found a method that returns a String representation. Can anybody help? Harry > thats for demo non-production unsingned tokens. > > you should use secure tokens that are server side generated. > > check this example on how Patuza (a Simple Social Network) renders OS > gadgets securely > > http://code.google.com/p/partuza/source/browse/trunk/Application/Views/gadge > t/gadget.php > > hope this helps > > ropu Jetzt komfortabel bei Arcor-Digital TV einsteigen: Mehr Happy Ends, mehr Herzschmerz, mehr Fernsehen! Erleben Sie 50 digitale TV Programme und optional 60 Pay TV Sender, einen elektronischen Programmführer mit Movie Star Bewertungen von TV Movie. Außerdem, aktuelle Filmhits und spannende Dokus in der Arcor-Videothek. Infos unter www.arcor.de/tv

