[SabreAMF] Fwd: Authentication problems/observations/question

[Evert | Rooftop]

Actually, I think (but might be wrong) authentication using AMF3 is 
pretty much useless in general, unless used over RTMP..

Evert

Wilhansen Li wrote:
> So in other words, the AMF specification is pretty much useless on the
> authentication protocol as it only explains how data is formatted and
> not the actual authentication process (which is pretty much true for
> the AMF3 specs that Adobe released as I see it)?
>
> I anycase, we'll probably have to wait for adobe to *actually* relase
> the BlazeDS source code to be able to implement the finer details of
> the remoting aspects.
>
> On 1/4/08, Evert | Rooftop <evert at rooftopsolutions.nl> wrote:
>   
>> My personal approach has always been to always use custom methods,
>> because it becomes much easier to supply additional feedback about why
>> authentication didn't work..
>>
>> Are cookies preserved across all browsers? I don't know exactly which OS
>> + browser combination, but I'm fairly sure there used to always be one
>> of them that never preserved cookies.. I think it's either IE or Windows
>> + FF. This might have changed since FP9, but if it hasn't,
>> Authentication in AS3 is pretty much useless. AMF0 would always submit
>> the user + password with every single request..
>>
>> The logout thing is actually a feature gap, I think it makes sense to
>> implement an onLogout.. If there's any way you could send me a 'saved
>> charles session', that would be very helpful, and I can probably
>> implement it pretty quickly..
>>
>> Evert
>>
>>     
>
>
>