FYI - I figured out how to elegantly handle this requirement. I overrode the onBeforeRequestDeserialized method and verify the verifID (what I call it) in there. I ignore the login method and invoke doUnexpectedFailure for any method that does not pass the correct verifID.
// Find the name of the method being invoked. Pattern p = Pattern.compile ("^.*com.lostcreations.vmm.client.ServerService\\|([^\\|]*?)\\|.*$"); Matcher m = p.matcher(serializedRequest); if (!m.matches()) { this.doUnexpectedFailure(new Exception("unabled to match rpc request for method name")); } // We don't need to verify the login method. String method = m.group(1); if (method.equals("login")) { return; } p = Pattern.compile ("^.*com.lostcreations.vmm.client.ServerService\\|([^\\|]*?)\\| java.lang.String\\|([^\\|]*?)\\|.*$"); m = p.matcher(serializedRequest); if (!m.matches()) { this.doUnexpectedFailure(new Exception("unabled to match rpc request for verifid")); } // Verify the verifID. Log.debug(getLogString("verifying method " + m.group(1))); Log.debug(getLogString("verifID=" + m.group(2))); // TODO: Verify the verifID Thank you everyone for your help. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to google-web-toolkit+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~----------~----~----~----~------~----~------~--~---