Re: FW: [flexcoders] setUsernamePassword and J2EE login (bounce)

Wed, 15 Feb 2006 10:42:26 -0800

I'm not a super jedi J2EE master nor have I stayed at a holiday inn express, but I will say we use

flashgateway.Gateway.getHttpRequest().isUserInRole()
and
flashgateway.Gateway.getHttpRequest().getUserPrincipal().getName()

without issue and we do have a custom JAAS module too.  We are using JRun.  We are using setUserNamePassword() in Flex on the service and Remote Objects (please don't yell at me Dave W  :) ).  All works fine on our Intranet.  Works on our extranet too which is just access via regular intERnet via a proxy server.  Note that we do not use flashgateway.Gateway.getHttpRequest().getRemotePrincipal()

DK

On 2/14/06, Jim Schneider <[EMAIL PROTECTED]> wrote:

No one has any thoughts/ideas on this?

 

-------------------------------------------------

Jim Schneider

KJ Interactive, Inc.

1-877-370-6906

1-612-605-5399

From: flexcoders@yahoogroups.com [mailto:flexcoders@yahoogroups.com] On Behalf Of Jim Schneider
Sent: Saturday, February 04, 2006 12:01 PM
To: flexcoders@yahoogroups.com
Subject: RE: [flexcoders] setUsernamePassword and J2EE login

 

I finally got back to looking at this. I Instrumented my code to look at flashgateway.Gateway.getHttpRequest().getRemotePrincipal() and getRemoteUser().  RemoteUser is empty and remote principal is null. I see the userid/password credentials in the amf trace from the client (setting UsernamePassword on the service), but nothing in the service.

 

I'm using remote objects. Remote object is a spring bean.

 

I've implemented a JAAS login module that appears to be functioning correctly (loginContext succeeds).

 

Using JBoss 4.0.x.

 

Any thoughts?

 

Thanks,

 

Jim

 

From: flexcoders@yahoogroups.com [mailto:flexcoders@yahoogroups.com] On Behalf Of Carson Hager
Sent: Saturday, January 21, 2006 10:22 PM
To: flexcoders@yahoogroups.com
Subject: RE: [flexcoders] setUsernamePassword and J2EE login

 

If you use standard J2EE auth to the container, you can get the remote user provided you are not using the proxy. There is currently an issue with the proxy not forwarding the cookie in most ( all that we've seen ) circumstances.  We have received a fix from Adobe on this that we are in the process of testing.

 

This being said, if you don't use the proxy, you'll be able to acccess the user without issue from within your service implementations.  Here's the kicker.  The AS2 VM doesn't not handle HTTP status code 500. It stops parsing the HTTP response when it sees a 500 which means that you will never be able to get at any data that occurs due to a SOAP Fault. Per the web services spec, the container is required to return an HTTP 500 status code when returning a fault. Effectively, you can't handle SOAP faults when you don't use the proxy and you get that meaningless error message that looks like it simply couldn't connect to the service.  This issue is "handled" by the proxy. It changes that HTTP status code to 200 so that the flash player can parse the request.  This is a kludge if you ask me but that's where we are today.  As a note, this is being addressed in FP8.5 but the fix will very likely not ( according to Adobe ) be fixed in earlier versions due to backward compatibility.

 

 

Carson

____________________________________________
 
Carson Hager
Cynergy Systems, Inc.
http://www.cynergysystems.com
 
Email:  [EMAIL PROTECTED]
Office:  866-CYNERGY
Mobile: 1.703.489.6466
 

 

 

From: flexcoders@yahoogroups.com [mailto: flexcoders@yahoogroups.com] On Behalf Of Matt Chotin
Sent: Saturday, January 21, 2006 7:37 PM
To: flexcoders@yahoogroups.com
Subject: RE: [flexcoders] setUsernamePassword and J2EE login

I think you should be able to get it from the flashgateway.Gateway.getHttpRequest().getRemotePrincipal() or getRemoteUser().

 

From: flexcoders@yahoogroups.com [mailto:flexcoders@yahoogroups.com] On Behalf Of Jim Schneider
Sent: Wednesday, January 18, 2006 8:32 AM
To: flexcoders@yahoogroups.com
Subject: [flexcoders] setUsernamePassword and J2EE login

 

After calling setUsernamePassword on a service, is this information "available" to the backend services (remote object or web service)? Or perhaps after a J2EE/JAAS login? If so, how/where?

 

We have a requirement to do a lot of logging of who's doing what in the system and was wondering whether there are any alternatives to passing a username/id with most/all APIs.


Thanks for any help.

 

Jim

 





--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com



SPONSORED LINKS
Web site design development Computer software development Software design and development
Macromedia flex Software development best practice

YAHOO! GROUPS LINKS





--
Douglas Knudsen
http://www.cubicleman.com
this is my signature, like it?

--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com



SPONSORED LINKS
Web site design development Computer software development Software design and development
Macromedia flex Software development best practice

YAHOO! GROUPS LINKS



Reply via email to