Crossdomain query

BenScott1 — Thu, 20 Feb 2014 03:14:48 GMT

I am accessing a secured service from a third party. The service is published on https, and when I try to open a test flex viewer with the service in it I am asked for login credentials as expected, but the service does not display - instead I get the error 'Channel.Security.Error'. The login details are definitely correct - they work with opening the rest endpoint of the service.

It seems to be some kind of issue with the crossdomain file. It is secured using the same credentials and looking at the response to the crossdomain request in fiddler it seems to be being accessed without any error. I can also open the file directly in my browser.

I am guessing that it is something to do with the content of the crossdomain (copied below).

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
    <site-control permitted-cross-domain-policies="all"/>
    <allow-access-from domain="*"/>
</cross-domain-policy>

My viewer is on an intranet location and not secured.

Cheers,
Ben

Re: Crossdomain query

RobertScheitlin__GISP — Thu, 20 Feb 2014 12:18:00 GMT

Ben,

The issue with the crossdomain.xml on the secured server would appear to be the missing secure attribute:

<allow-access-from domain="*" secure="false"/>

topic Re: Crossdomain query in ArcGIS API for Flex Questions

Crossdomain query

Re: Crossdomain query