0

I'm using TurboGears with PyAMF behind a Flex client, and everything works well.

What I want to do is expose just a AMF login method to the world, and only allow access to other AMF functions once the user has logged in.

Also, once the user is known, I'd like the protected AMF methods to get the username from the auth information, so not every function has to start with the user_id.

Is there support for this sort of integration out there anywhere?

Jim Carroll
  • 2,320
  • 17
  • 23

2 Answers2

0

I have not done it, but I happened to have this bookmarked the other day via del.icio.us.

Hope it helps.

Using PyAMF With TurboGears 2

  • That's a good write-up, but it doesn't handle keeping anything private, or logging in with credentials. – Jim Carroll Mar 24 '10 at 18:34
  • Along the lines of that you should be able to create a login service in front of the rest of your services to provide authentication and keep things private. Sorry I can't post any samples of this, but I can tell you that is how I currently handle this. – tehsilverdollar Apr 01 '10 at 19:40
0

I ended up spending over a day hitting the /login url with html posts until it all worked. I couldn't use the repoze.who mechanism from within the Amf controller.

I don't think I'll choose Turbogears for my next project though... there have been problems with setup every time I've set it up, and having to do work-arounds like this is just because it's not a well thought out architecture.

Jim Carroll
  • 2,320
  • 17
  • 23