<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Flex / AIR, PHP and user authentication</title>
	<atom:link href="http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/feed/" rel="self" type="application/rss+xml" />
	<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/</link>
	<description>Flex, AIR and Rock&#38;Roll</description>
	<pubDate>Fri, 21 Nov 2008 08:47:29 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.3</generator>
		<item>
		<title>By: Mihai Corlan</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-1222</link>
		<dc:creator>Mihai Corlan</dc:creator>
		<pubDate>Tue, 11 Nov 2008 14:03:14 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-1222</guid>
		<description>@Dejan
I think the problem is with the certificate. If this is a certificate signed by Certificate Authority, it shouldn't ask every time. Otherwise, if you try the same thing but in the IE browser, I think will ask for permission each time.</description>
		<content:encoded><![CDATA[<p>@Dejan<br />
I think the problem is with the certificate. If this is a certificate signed by Certificate Authority, it shouldn&#8217;t ask every time. Otherwise, if you try the same thing but in the IE browser, I think will ask for permission each time.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dejan</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-1178</link>
		<dc:creator>Dejan</dc:creator>
		<pubDate>Thu, 06 Nov 2008 15:27:23 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-1178</guid>
		<description>Hello,

I've developed Flex Air application that consumes Web services on telephony server. I've added Authorization header to enable Basic http authentication; the problem I have is that "someone" (Flex Air engine?) asks for security certificate every time the Web service is invoked. I can't force the application to import the certificate (in "Security Alert" window it says "The import was successful", but next time when the service is invoked, it is the same story). The service returns valid result.

Application written in C#, which consumes same Web service with same credentials and on same client workstation works fine. 

Any idea how to proceed?

Thx,
Dejan</description>
		<content:encoded><![CDATA[<p>Hello,</p>
<p>I&#8217;ve developed Flex Air application that consumes Web services on telephony server. I&#8217;ve added Authorization header to enable Basic http authentication; the problem I have is that &#8220;someone&#8221; (Flex Air engine?) asks for security certificate every time the Web service is invoked. I can&#8217;t force the application to import the certificate (in &#8220;Security Alert&#8221; window it says &#8220;The import was successful&#8221;, but next time when the service is invoked, it is the same story). The service returns valid result.</p>
<p>Application written in C#, which consumes same Web service with same credentials and on same client workstation works fine. </p>
<p>Any idea how to proceed?</p>
<p>Thx,<br />
Dejan</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mihai Corlan</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-1156</link>
		<dc:creator>Mihai Corlan</dc:creator>
		<pubDate>Mon, 03 Nov 2008 10:15:02 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-1156</guid>
		<description>@avidFlex 
&gt;&gt;1) Is it necessary to use the AsyncToken for user authentication?
I am not sure I understood your question. If you use RemoteObject (with AMFPHP) you have just to register the listners for result to receive the answer from the call.

&gt;&gt;2)What kind of data does AMFPHP pass back to Actionscript?
Here is a resource to see the mapping between the ActionScript types and PHP: http://amfphp.org/docs/datatypes.html

Take a look at my article on Flex and PHP with AMFPHP http://corlan.org/2008/10/10/flex-and-php-remoting-with-amfphp/</description>
		<content:encoded><![CDATA[<p>@avidFlex<br />
>>1) Is it necessary to use the AsyncToken for user authentication?<br />
I am not sure I understood your question. If you use RemoteObject (with AMFPHP) you have just to register the listners for result to receive the answer from the call.</p>
<p>>>2)What kind of data does AMFPHP pass back to Actionscript?<br />
Here is a resource to see the mapping between the ActionScript types and PHP: <a href="http://amfphp.org/docs/datatypes.html" onclick="javascript:pageTracker._trackPageview('a/http://amfphp.org/docs/datatypes.html');" rel="nofollow">http://amfphp.org/docs/datatypes.html</a></p>
<p>Take a look at my article on Flex and PHP with AMFPHP <a href="http://corlan.org/2008/10/10/flex-and-php-remoting-with-amfphp/"  rel="nofollow">http://corlan.org/2008/10/10/flex-and-php-remoting-with-amfphp/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: avidFlex</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-1155</link>
		<dc:creator>avidFlex</dc:creator>
		<pubDate>Mon, 03 Nov 2008 04:14:09 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-1155</guid>
		<description>Hi there,

Been trying to create a user authentication using Flex 3 and AMFPHP. What happens in my case is that the PHP function works in the service browser, but when i try to pass variables into the PHP function (using remote object), either the variables are not being passed in or the PHP function is not returning the variable i need for other checking purposes. 

Just a few questions after reading the tutorial:
1) Is it necessary to use the AsyncToken for user authentication?
2) What kind of data does AMFPHP pass back to Actionscript?

Thanks in advance for the help.</description>
		<content:encoded><![CDATA[<p>Hi there,</p>
<p>Been trying to create a user authentication using Flex 3 and AMFPHP. What happens in my case is that the PHP function works in the service browser, but when i try to pass variables into the PHP function (using remote object), either the variables are not being passed in or the PHP function is not returning the variable i need for other checking purposes. </p>
<p>Just a few questions after reading the tutorial:<br />
1) Is it necessary to use the AsyncToken for user authentication?<br />
2) What kind of data does AMFPHP pass back to Actionscript?</p>
<p>Thanks in advance for the help.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Bookmarks about Air</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-1001</link>
		<dc:creator>Bookmarks about Air</dc:creator>
		<pubDate>Thu, 11 Sep 2008 02:45:38 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-1001</guid>
		<description>[...] - bookmarked by 4 members originally found by septembersember on 2008-08-18  Flex / AIR, PHP and user authentication  http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/ - bookmarked by 2 members [...]</description>
		<content:encoded><![CDATA[<p>[...] - bookmarked by 4 members originally found by septembersember on 2008-08-18  Flex / AIR, PHP and user authentication  <a href="http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/"  rel="nofollow">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/</a> - bookmarked by 2 members [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mihai Corlan</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-908</link>
		<dc:creator>Mihai Corlan</dc:creator>
		<pubDate>Sat, 30 Aug 2008 20:08:07 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-908</guid>
		<description>@seme1
1. To import the project you need to have Flex Builder 3

2. Usually a token is a string of 32 chars or more. Each user must have an unique token, and many people are generating using a hash function such as MD5.</description>
		<content:encoded><![CDATA[<p>@seme1<br />
1. To import the project you need to have Flex Builder 3</p>
<p>2. Usually a token is a string of 32 chars or more. Each user must have an unique token, and many people are generating using a hash function such as MD5.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: seme1</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-907</link>
		<dc:creator>seme1</dc:creator>
		<pubDate>Sat, 30 Aug 2008 09:24:05 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-907</guid>
		<description>I am using only HTML/Javascript to develop my AIR application. I was unable to get your project imported in Aptana. 

I am trying to understand how to save tokens with AIR. Are they simply string variables ? In the server-side code,, does each user have a different token? What's the best approach for generating tokens ?</description>
		<content:encoded><![CDATA[<p>I am using only HTML/Javascript to develop my AIR application. I was unable to get your project imported in Aptana. </p>
<p>I am trying to understand how to save tokens with AIR. Are they simply string variables ? In the server-side code,, does each user have a different token? What&#8217;s the best approach for generating tokens ?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mihai Corlan</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-790</link>
		<dc:creator>Mihai Corlan</dc:creator>
		<pubDate>Fri, 15 Aug 2008 19:26:44 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-790</guid>
		<description>Yes, they can decompile and see the buttons they shouldn't, but they cannot use it. As I explained in my post, when the client make a request to the server, the server knows (based on session or token) what user / credentials made the request. If the method is outside of the user rol, it is discarded.</description>
		<content:encoded><![CDATA[<p>Yes, they can decompile and see the buttons they shouldn&#8217;t, but they cannot use it. As I explained in my post, when the client make a request to the server, the server knows (based on session or token) what user / credentials made the request. If the method is outside of the user rol, it is discarded.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: TVPDan</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-789</link>
		<dc:creator>TVPDan</dc:creator>
		<pubDate>Fri, 15 Aug 2008 15:06:00 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-789</guid>
		<description>By that method though, if someone took the SWF file and decompiled it, wouldn't they see items that they could use maliciously?</description>
		<content:encoded><![CDATA[<p>By that method though, if someone took the SWF file and decompiled it, wouldn&#8217;t they see items that they could use maliciously?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mihai Corlan</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-788</link>
		<dc:creator>Mihai Corlan</dc:creator>
		<pubDate>Fri, 15 Aug 2008 08:24:17 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-788</guid>
		<description>One way is to set the visible property to "false" on the UI Components you want to hide.

Another way is to use mx:states to define one state for each rol.</description>
		<content:encoded><![CDATA[<p>One way is to set the visible property to &#8220;false&#8221; on the UI Components you want to hide.</p>
<p>Another way is to use mx:states to define one state for each rol.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: TVPDan</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-787</link>
		<dc:creator>TVPDan</dc:creator>
		<pubDate>Fri, 15 Aug 2008 01:14:12 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-787</guid>
		<description>What would be the best method for showing certain Flex app elements based on user permissions in a DB (MySQL)? Say, admins can see a delete button and regular users cant, but can see everything else.

Thanks,
Dan</description>
		<content:encoded><![CDATA[<p>What would be the best method for showing certain Flex app elements based on user permissions in a DB (MySQL)? Say, admins can see a delete button and regular users cant, but can see everything else.</p>
<p>Thanks,<br />
Dan</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Flex / AIR, PHP and user authentication &#171; Rich Internet Applications</title>
		<link>http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-631</link>
		<dc:creator>Flex / AIR, PHP and user authentication &#171; Rich Internet Applications</dc:creator>
		<pubDate>Wed, 23 Jul 2008 10:42:46 +0000</pubDate>
		<guid isPermaLink="false">http://corlan.org/2008/07/22/flex-air-php-and-user-authentication/#comment-631</guid>
		<description>[...] Source [...]</description>
		<content:encoded><![CDATA[<p>[...] Source [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
