FYI - I figured out how to elegantly handle this requirement. I
overrode the onBeforeRequestDeserialized method and verify the verifID
(what I call it) in there. I ignore the login method and invoke
doUnexpectedFailure for any method that does not pass the correct
verifID.

        // Find the name of the method being invoked.
        Pattern p = Pattern.compile
("^.*com.lostcreations.vmm.client.ServerService\\|([^\\|]*?)\\|.*$");
        Matcher m = p.matcher(serializedRequest);

        if (!m.matches())
        {
            this.doUnexpectedFailure(new Exception("unabled to match
rpc request for method name"));
        }

        // We don't need to verify the login method.
        String method = m.group(1);
        if (method.equals("login"))
        {
            return;
        }

        p = Pattern.compile
("^.*com.lostcreations.vmm.client.ServerService\\|([^\\|]*?)\\|
java.lang.String\\|([^\\|]*?)\\|.*$");
        m = p.matcher(serializedRequest);

        if (!m.matches())
        {
            this.doUnexpectedFailure(new Exception("unabled to match
rpc request for verifid"));
        }

        // Verify the verifID.
        Log.debug(getLogString("verifying method " + m.group(1)));
        Log.debug(getLogString("verifID=" + m.group(2)));

        // TODO: Verify the verifID

Thank you everyone for your help.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To post to this group, send email to Google-Web-Toolkit@googlegroups.com
To unsubscribe from this group, send email to 
google-web-toolkit+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/Google-Web-Toolkit?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to