flex-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christofer Dutz <christofer.d...@c-ware.de>
Subject AW: How to securing Apache Flex / GraniteDS Apps with Spring security
Date Fri, 31 Jan 2014 12:23:42 GMT
Hmmm ... well I can't really confirm this. It's a one-time Setup cost you have to pay, 
but then you can reuse that Setup as often as you want. I develop my application in pure Java
and have my maven build generate the ActionScript model from that. Now all I have to do 
is simply use the classes that were generated by my build. 

But as Long as you are developing web applications you will allways have more than pure-Java

(Ok ... If you were creating Java Applets this wouln't be the case). I really like to be able
to run/debug/Profile 
the real Thing and not have shiploads of Tools having to hide the Details of serious Framework
hackery from me.
For me GWT is by far the most insane approach.


Von: Alain Ekambi <jazzmatadazz@gmail.com>
Gesendet: Freitag, 31. Januar 2014 12:07
An: users@flex.apache.org
Betreff: Re: How to securing Apache Flex / GraniteDS Apps with Spring security

Thats another reason why we went away from actionscript based flex
Development and leverage Java in the entire Stack. With actionscript there
are just too Many moving pieces

Am Freitag, 31. Januar 2014 schrieb Christofer Dutz :

> Hi Giuseppe,
> I think this explains how to secure the Connection, but not how to
> integrate the security mechanism of graniteds with that of spring-security.
> When integrating GraniteDs with Sprin-Security I would expect
> Login-attemts to GraniteDS to utilize the Authentication components of
> SpringSecurity and whenever a Service is called from Flex, that
> SpringSecurity will handle the permissions to execute that Service while
> GraniteDS will take care of securing the Connection itself.
> Chris
> ________________________________________
> Von: Giuseppe Romano <giuseppe.romano@mobytech.it <javascript:;>>
> Gesendet: Freitag, 31. Januar 2014 11:28
> An: users@flex.apache.org <javascript:;>
> Betreff: Re: How to securing Apache Flex / GraniteDS Apps with Spring
>  security
> Hi Massimo,
> look at
> http://www.granitedataservices.com/public/docs/3.0.1/docs/reference/flex/graniteds-refguide-flex.html#remoting.security
> In that chapter is explained step-by-step how to setup the security
> environment.
> --
> Giuseppe Romano
> Skype name: giuseppe.romano.80
> Mobile: +39 3404900103
> On Fri, January 31, 2014 11:11 am, Massimo Perani wrote:
> Hi all,
> I built a Flex app (mobile & desktop) that calls a backend built in Spring
> and use GraniteDS to expose services.
> Now I'm trying to secure my services with Spring Security but I can't find
> a good example about it.
> I already exposed my services to other external application with SpringMVC
> (rest/json)
> there I used spring security with custom filter to check for a token in
> http header, but I can't use the same filter with GraniteDS servlet because
> from client side (Flex app) I can't set parameters into http header with
> GraniteDS...
> Can you give some advice about with type of authentication (basic, digest,
> custom...) to use and give me some good tutorial
> about securing Apache Flex application with GraniteDS?
> Thanks so much.
> Massimo

View raw message