dkozar evolved a work­ing method to Authen­ti­cate and Autho­rize a Flex based app datas ser­vice call using Zend AMF, he writes;

I’ve been strug­gling with it, and fig­ured it all out — so, per­haps it could help others.

The authen­ti­ca­tion is called on the server only if cre­den­tials sup­plied from the client (via the remote pro­ce­dure call head­ers). This snip­pet illus­trates the setup of cus­tom auth (these are the last 6 lines of gateway.php script):

// Handle request
$auth = new My_Amf_Auth(); // authentication
$server->setAuth($auth);
$acl = new Zend_Acl(); // authorization
$server->setAcl($acl);
echo $server->handle();

Now, your cus­tom auth should extend Zend_Amf_Auth_Abstract. Since I want to authen­ti­cate users from a data­base, I bring the Zend_Auth_Adapter_DbTable to play. But since I can­not extend both Zend_Amf_Auth_Abstract and Zend_Auth_Adapter_DbTable, I use a com­po­si­tion:

< ?php
require_once ('Zend/Amf/Auth/Abstract.php');

return $result;
}
}


Here’s the adapter class:

< ?php
/**
* DB table adapter auth class for AMF by Danko Kozar, dankokozar.com
* @author dkozar
* Singleton
*/
class My_Db_Adapter extends Zend_Auth_Adapter_DbTable {

return $result;
}
}


MyService.php class. Here it is:


< ?php
/**
* PHP service class with authorization
* by Danko Kozar, dankokozar.com
* @author dkozar
*
*/
class MyService
{
/**
* from zend docs:
* If the ACL object is set, and the class being called defines initAcl() method,
* this method will be called with the ACL object as an argument.
* This method can create additional ACL rules and return TRUE,
* or return FALSE if no access control is required for this class.
*
* @param Zend_Acl $acl
* @return boolean
*/
public function initAcl($acl)
{
$acl->addRole(new Zend_Acl_Role("administrator"));
$acl->addRole(new Zend_Acl_Role("user"));

/**
*
* Returns data
* @return [int]
*/
func­tion get­Data()
{
$arr = array(1, 2, 3);
return $arr;
}
}
?>

Note that the autho­riza­tion is being built dynam­i­cally inside the ini­tAcl method.

On the Flex side I have an auto-generated class (MySer­vice) which extends another auto-generated class (_Super_MyService).

The point is that the outer one is auto-generated only once (ini­tially), and you can mod­ify it, with­out wor­ry­ing to be over­writ­ten on ser­vice regeneration.

There’s a pro­tected prop­erty _serviceControl (which is of type Remo­teOb­ject) which could be tweaked if needed.

I’m tweak­ing it by of set­ting the end­point (with string read from a client side con­fig in preIni­tial­ize­Ser­vice() method). Plus, I’m adding 2 more meth­ods, which expose set­Cre­den­tials and setRemote­Cre­den­tials meth­ods of _serviceControl, so I can acces it from my code.


package services.myservice
{
public class MyService extends _Super_MyService
{
/**
* Override super.init() to provide any initialization customization if needed.
*/
protected override function preInitializeService():void
{
super.preInitializeService();

So, before call­ing MySer­vice meth­ods, I’m set­ting the cre­den­tials with set­Cre­den­tials() method and this runs the authen­ti­ca­tion on the PHP side:


private var service:MyService;
....
service = new MyService(); // ServiceLocator.getInstance().getHTTPService("presetLoader");
service.setCredentials("user1", "pass1");
var token:AsyncToken = service.getData();


The authen­ti­ca­tion via Zend_Amf_Server is, by the way, OPTIONAL! Mean­ing, with no cre­den­tials sup­plied, Zend_Amf_Server will NOT RUN IT. Thus you should rely on Zend_Acl (e.g. roles) to so your per­mis­sions and security!

Finally, here’s the MySQL DB table I’ve been using for authen­ti­ca­tion:

--
-- Table structure for table `users`
--
CREATE TABLE IF NOT EXISTS `users` (
`id` int(11) NOT NULL AUTO_INCREMENT,
`username` varchar(50) NOT NULL,
`password` varchar(32) DEFAULT NULL,
`role` varchar(45) DEFAULT NULL,
`firstname` varchar(50) DEFAULT NULL,
`lastname` varchar(50) DEFAULT NULL,
`email` varchar(255) DEFAULT NULL,
PRIMARY KEY (`id`),
UNIQUE KEY `username` (`username`),
UNIQUE KEY `id_UNIQUE` (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 AUTO_INCREMENT=2 ;

–
– Dump­ing data for table ‘users‘
–
INSERT INTO ‘users‘ (‘id‘, ‘user­name‘, ‘pass­word‘, ‘role‘, ‘first­name‘, ‘last­name‘, ‘email‘) VALUES
(1, ‘user1’, ‘pass1’, ‘admin­is­tra­tor’, ‘Danko’, ‘Kozar’, NULL);

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Cheers!
Danko

Adobe Forums