- Flex

Flex integration broken in CFMX 7.02 on Ubuntu (maybe - for most people)

Wed, 29 Aug 2007 00:40:00 --0100

I struggled with this over most of the weekend - and eventually came to the conclusion that flex / CF integration does not work using CFMX 7.02 on Ubuntu. This appears to be a known issue (at least for Red Hat) - logged here Any flex requests to CFC's are met with flex/messaging/io/amf/UnknownTypeException. [More]

"Invisible Software," RIAs, and ColdFusion | Matt Woodward's Blog

Wed, 25 Jul 2007 22:21:00 --0100

Great article from Matt Woodward on the changing emphasis within online application development:<br/> "Invisible Software," RIAs, and ColdFusion | Matt Woodward's Blog

Blogged with Flock

"Page Not Found (404)" error accessing Coldfusion /flex2gateway on IIS on windows XP

Tue, 27 Mar 2007 01:26:00 --0100

It's taken me 2 hours to get to the bottom of this, but I finally managed to fix the problem:).

Machine History

My machine had been set-up with CFMX 6.1. I had then installed CFMX 7.0.1 in addition to CFMX 6.1, with a virtual directory set-up within IIS with all the CF7 mappings. Subsequently I installed the CFMX 7.0.2 updater.

Problem Description

Any requests made to http://localhost/flex2gateway/ resulted in a standard IIS "Page not Found" 404 error being displayed. Requests to http://localhost/flex2gateway/index.cfm resulted in "No configured channel has an endpoint path /flex2gateway/index.cfm'" JRun Servlet error being displayed. This made me think that the problem was not with the Flex configuration, but rather that the request was not getting as far as JRun / CF / Flex - i.e. it was a problem with the CF connector.

Solution:

I ran:

\CFusionMX7\bin\connectors\Remove_ALL_connectors.bat

to remove CF7 IIS connector. Followed by:

\CFusionMX7\bin\connectors\IIS_connector.bat

to reinstall the CF7 IIS connector. Success! Requests to http://localhost/flex2gateway/ now result in a blank page - http status 200 - and flex applications can now access CFCs successfully. Hopefully this helps someone out there - I couldn't find anything particularly helpful on google when I looked...

Flex - cross-domain-policy - I just don't get it...

Mon, 19 Mar 2007 23:52:00 --0100

I installed Flex Builder 2 plugin last night, - and overall I'm very impressed. I'm particularly impressed with the documentation, and in particular the lessons - each lesson is really short, but they cover the basics very quickly - great for someone like me who has no previous experience with Flex, and very little with flash. I've been working through the lessons, and in the second lesson, it goes through creating a (basic) RSS feed reader. So I went through the example, using the RSS feed given as an example in the lesson (for Matt Chotin's blog). This worked fine, so I though - that's cool, lets point the feed at my own blog... This didn't do anything, so, I worked out how to view debug mode (for some reason debug mode is only working with IE on my machine, not Firefox - probably an installation issue), and saw the following error:

Security error accessing url...

I then went back to the second page of the lesson, where it mentioned about having to set-up a "crossdomain.xml" file on the server hosting the data source... I'm sorry - but I don't get this - on the domain on which the RSS feed is hosted, you have to set-up a file detailing which domains can host flex / flash applications which access the source domain... The flash application is responsible for checking this file before deciding whether to access the remote data source... So... this file on the remote server, instructs the client application to check whether it has permission to access the remote server, based on the domain on which the client app thinks its being served on... So what on earth does this achieve? I can see 2 cases where you might want to lock things down:

The remote server is hosting a service with restricted access, and needs to make sure the client is authorised to serve the data before allowing it to be served
The application is running on a local machine, and you want to restrict the sites that the application has access to

The first point is not achieved by the use of the "crossdomain.xml" file - as one of the 1st rules of implementing security within a client-server environment, is that the server is responsible for implementing security, not the client. In addition, I would assume that the flash application knows where it being served from based on the host headers (as it is running in the local machine, not on the domain from which it is served) - which presumably (and I've not checked) could be faked through the use of the hosts file etc. The second point is not implemented at all - as the crossdomain.xml file is implemented on the remote server - not on the client. So what on earth does this crossdomain.xml file achieve - other than requiring hosts of a public service to make a concious decision that they will allow flash clients to access the service. Surely the point of open standards such as RSS - is that they are open - and it is the choice of the consumer, how they consume them... PLEASE - if I have completely missed the point here, let me know - as from what I can see, the crossdomain.xml "security" implementation would appear to be both pointless and obstructive... I could see the point if the crossdomain.xml file were optional and advisory - a bit like robots.txt - an indication of a preference, if implemented, rather than an absolute requirement if data is to be served to a remote domain.