Just tried now with firefox since the only problem with it is the fact that cfm pages used for uploading files can't access authentication set by setCredentials:
Call from a cfc:
Request:
POST /flashservices/gateway?macromedia=rocks HTTP/1.1
Host: srv_desenvol
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Proxy-Connection: keep-alive
Cookie: CFID=2604; CFTOKEN=5b2143fe2d5264da-B30636F5-E7FB-56A4-4AD662DB629EC7FB; JSESSIONID=62308294b8863ef71442
Content-Type: application/x-amf
Content-Length: 303
Response:
HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Date: Wed, 19 Apr 2006 17:13:54 GMT
X-Powered-By: ASP.NET
Server: Microsoft-IIS/5.0
Date: Wed, 19 Apr 2006 17:14:01 GMT
X-Powered-By: ASP.NET
Content-Type: application/x-amf
Content-Length: 31
When uploading the file (weird I got 2 requests a 400 responde and a 200 when I only make 1 request)
400 request:
POST /pt/cofina/utils/upload/upload.cfm?id=B3237956-E7FB-56A4-49BBBF0C490FD672 HTTP/1.0
Accept: text/*
Content-Type: multipart/form-data; boundary=----------Ef1ei4cH2Ij5Ij5gL6gL6GI3ei4GI3
User-Agent: Shockwave Flash
Host: srv_desenvol
Content-Length: 0
Proxy-Connection: Keep-Alive
Pragma: no-cache
400 response:
HTTP/1.1 400 HTTP method POST is not supported by this URL
Server: Microsoft-IIS/5.0
Date: Wed, 19 Apr 2006 17:13:54 GMT
X-Powered-By: ASP.NET
Content-Language: pt-PT
200 Request:
POST /pt/cofina/utils/upload/upload.cfm?id=B3237956-E7FB-56A4-49BBBF0C490FD672 HTTP/1.0
Accept: text/*
Content-Type: multipart/form-data; boundary=----------Ef1ei4cH2Ij5Ij5gL6gL6GI3ei4GI3
User-Agent: Shockwave Flash
Host: srv_desenvol
Content-Length: 130385
Proxy-Connection: Keep-Alive
Pragma: no-cache
200 Response:
HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Date: Wed, 19 Apr 2006 17:13:54 GMT
X-Powered-By: ASP.NET
Set-Cookie: CFID=2608;expires=Fri, 11-Apr-2036 17:13:55 GMT;path=/
Set-Cookie: CFTOKEN=4d13da091700b518-B324D1A1-E7FB-56A4-4695681993B38760;expires=Fri, 11-Apr-2036 17:13:55 GMT;path=/
Set-Cookie: JSESSIONID=62308d8c1a01629431d5;path=/
Set-Cookie: CFAUTHORIZATION_Distribuicao=;expires=Tue, 19-Apr-2005 17:13:55 GMT;path=/
Content-Type: text/html; charset=UTF-8
I can see that The session is different but I don't understand why. For uploading, I'm using the File_IO.swf.
João Fernandes
Dep. Informática - Área de Desenvolvimento
Cofina media
Avenida João Crisóstomo, Nº 72 . 1069-043 Lisboa PORTUGAL
Tel (+351) 213 185 200 . Fax (+351) 213 540 370
[EMAIL PROTECTED]
-----Original Message-----
From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Carson Hager
Sent: quarta-feira, 19 de Abril de 2006 18:19
To: flexcoders@yahoogroups.com
Subject: RE: [flexcoders] [Flex 1.5] File Upload and ColdFusion authentication
Right...those other tools will work just fine. The headers are the key to everything here. There are known issues in 8,0,22 that are the cause of some of the file upload strangeness. Those issues have been noted here in the past.
Carson
____________________________________________
Carson Hager
Cynergy Systems, Inc.
http://www.cynergysystems.com
Email: [EMAIL PROTECTED]
Office: 866-CYNERGY
Mobile: 1.703.489.6466
-----Original Message-----
From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of João Fernandes
Sent: Wednesday, April 19, 2006 9:52 AM
To: flexcoders@yahoogroups.com
Subject: RE: [flexcoders] [Flex 1.5] File Upload and ColdFusion authentication
No problem Carson,
I'm only using http and relative paths for upload. I'll hardcode the full URL and see if the same behavior is confirmed.
For the headers part, something like serviceCapture or Paros right?
Hope you'll recover soon :)
João Fernandes
Dep. Informática - Área de Desenvolvimento Cofina media
Avenida João Crisóstomo, Nº 72 . 1069-043 Lisboa PORTUGAL Tel (+351) 213 185 200 . Fax (+351) 213 540 370 [EMAIL PROTECTED]
-----Original Message-----
From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Carson Hager
Sent: quarta-feira, 19 de Abril de 2006 17:36
To: flexcoders@yahoogroups.com
Subject: RE: [flexcoders] [Flex 1.5] File Upload and ColdFusion authentication
João,
Apologies for the late response. I've been out sick. If you're not using SSL, I would start by using something like tcptunnel or another http monitor to watch the traffic, in particular the headers. We have seen this happen with file upload when using relative URLs or also when switching from http to https. Using something like tcptunnel will tell you a trememndous amount allowing you to debug the headers which is where the session information will be stored. Let me know if you need some help getting tcptunnel up and running. It's a utility from Apache SOAP.
Carson
____________________________________________
Carson Hager
Cynergy Systems, Inc.
http://www.cynergysystems.com
Email: [EMAIL PROTECTED]
Office: 866-CYNERGY
Mobile: 1.703.489.6466
-----Original Message-----
From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of João Fernandes
Sent: Tuesday, April 18, 2006 3:51 AM
To: flexcoders@yahoogroups.com
Subject: RE: [flexcoders] [Flex 1.5] File Upload and ColdFusion authentication
Carson,
It's even worse. I'll try to make it clear:
Login with a flex form
Use setcredentials inside my delegate to my AuthenticationRO.
Use onRequestStart to handle <cflogin authentication
After that:
1) open a common.cfm page to see if user is authenticated
2) post files from within flex
3) call from Flex other CFCs using roles.
In FF:
1) It shows user credentials with no problem.
2) Doesn't work since it creates a new session.
3) It works perfectly as long I use the same endpoint (which is ok).
In IE:
1) Doesn't show user credentials
2) Doesn't work since 1) fails.
3) Doesn't work if I set only credentials for my authentication.cfc. If I set for all my RO, it works.
When using setCredentials to all my RO I can see this weird behavior:
From FF - It goes through <cflogin block only once
From IE - It goes through <cflogin block for each method request
João Fernandes
Dep. Informática - Área de Desenvolvimento Cofina media
Avenida João Crisóstomo, Nº 72 . 1069-043 Lisboa PORTUGAL Tel (+351) 213 185 200 . Fax (+351) 213 540 370 [EMAIL PROTECTED]
-----Original Message-----
From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Carson Hager
Sent: segunda-feira, 17 de Abril de 2006 19:27
To: flexcoders@yahoogroups.com
Subject: RE: [flexcoders] [Flex 1.5] File Upload and ColdFusion authentication
This is definitely an FFX issue. I'm not sure if it happens across all versions but I know it was broken with 1.5.
Carson
____________________________________________
Carson Hager
Cynergy Systems, Inc.
http://www.cynergysystems.com
Email: [EMAIL PROTECTED]
Office: 866-CYNERGY
Mobile: 1.703.489.6466
-----Original Message-----
From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of João Fernandes
Sent: Monday, April 17, 2006 10:55 AM
To: flexcoders@yahoogroups.com
Subject: RE: [flexcoders] [Flex 1.5] File Upload and ColdFusion authentication
Indeed,
Firefox 1.5.0.2, I'm so used to validate against IE for all problems that might happen that I forgot to check this time if it was a Firefox problem. Is this a known issue?
João Fernandes
-----Original Message-----
From: flexcoders@yahoogroups.com on behalf of Carson Hager
Sent: Mon 17-Apr-06 6:08 PM
To: flexcoders@yahoogroups.com
Subject: RE: [flexcoders] [Flex 1.5] File Upload and ColdFusion authentication
Is this FireFox 1.5?
Carson
____________________________________________
Carson Hager
Cynergy Systems, Inc.
http://www.cynergysystems.com <http://www.cynergysystems.com/>
Email: [EMAIL PROTECTED]
Office: 866-CYNERGY
Mobile: 1.703.489.6466
________________________________
From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of João Fernandes
Sent: Monday, April 17, 2006 9:54 AM
To: flexcoders@yahoogroups.com
Subject: [flexcoders] [Flex 1.5] File Upload and ColdFusion authentication
Hi there,
I'm trying to protect my upload page using ColdFusion authentication but when using fileReference, it seems that a new session is created instead of using the current used by the App.
I'm using Flex 1.5 integrated with ColdFusion 7. If I log in with Flex and access a cfm page, I can get the user name perfectly ( getauthuser() ) but when uploading with fileReference inside my Flex App, a new sessionID is generated for that request.
Any Ideas how to solve this?
Thanks,
João Fernandes
Dep. Informática - Área de Desenvolvimento Cofina media
Avenida João Crisóstomo, Nº 72 . 1069-043 Lisboa PORTUGAL Tel (+351) 213 185 200 . Fax (+351) 213 540 370 [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com
________________________________
YAHOO! GROUPS LINKS
* Visit your group "flexcoders <http://groups.yahoo.com/group/flexcoders> " on the web.
* To unsubscribe from this group, send an email to:
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service <http://docs.yahoo.com/info/terms/> .
________________________________
--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com
Yahoo! Groups Links
--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com
Yahoo! Groups Links
--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com
Yahoo! Groups Links
--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com
Yahoo! Groups Links
--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com
Yahoo! Groups Links
--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com
YAHOO! GROUPS LINKS
- Visit your group "flexcoders" on the web.
- To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
- Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
