"Authorization" Header not supported in AS3 ?

[dabei]

Hi, I am trying to use AS3 to make a URL request with authorization header. Using the code below:
var request:URLRequest = new URLRequest ( 'http://myserviceURL' );
var requestHeader:URLRequestHeader = new URLRequestHeader("Authorization", "AuthSub token=CI3xlrq1DxCjtruCAw");
request.requestHeaders.push(requestHeader);
...

But I get the following error:
ArgumentError: Error #2096: The HTTP request header Authorization cannot be set via ActionScript.
at flash.net::URLStream/load()
at flash.net::URLLoader/load()
...

But according to adobe's api reference, "Authorization" header should be allowed.
Any ideas? Thanks!

[emahe]

Hi, I am trying to use AS3 to make a URL request with authorization header. Using the code below:
var request:URLRequest = new URLRequest ( 'http://myserviceURL' );
var requestHeader:URLRequestHeader = new URLRequestHeader("Authorization", "AuthSub token=CI3xlrq1DxCjtruCAw");
request.requestHeaders.push(requestHeader);
...

But I get the following error:
ArgumentError: Error #2096: The HTTP request header Authorization cannot be set via ActionScript.
at flash.net::URLStream/load()
at flash.net::URLLoader/load()
...

But according to adobe's api reference, "Authorization" header should be allowed.
Any ideas? Thanks!

Hi,

I currently encounter the same issue.
I have found that the Authorization header was added to the disallowed HTTP headers list recently (after flash player r47)
Did you find a workaround to make it work?

Thx in advance,

Eric

[mfharis]

hi all,

I did face the similar issue and i cant set request headers in flash AS3. Actually i m trying to download file from S3 Amazon Bucket, which can only be allowed if custom header is set in a request. I m trying to set that but when I check the request Packets from Etheral or WireShark, the request doesnt contain any of mine custom header.

here is my flash download code;

var headers:Array = new Array();

var authHeader:URLRequestHeader = new URLRequestHeader("Authorization","AWS: "+accesskey+":"+signature);
var dateHeader:URLRequestHeader = new URLRequestHeader("x-amz-date",date);

request.url = domainUrl+objectkey;
request.method = URLRequestMethod.GET;
headers.push(authHeader);
headers.push(dateHeader);

request.requestHeaders = headers;

trace('request:'+request.requestHeaders.length);

try {
loader.load(request);
}catch (error:Error) {
trace("Unable to load requested document.");
}

Remember I uploaded crossdomain.xml in the bucket with polies mentioned as under;

<cross-domain-policy>
<allow-access-from domain="*" secure="false" />
<site-control permitted-cross-domain-policies="all"/>
<allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy>

In order to download file from Amazon Bukcet the Request Packet should be;

GET /<bucketname>/<filename>HTTP/1.1
x-flash-version: 10,0,2,54
User-Agent: Shockwave Flash
Host: s3.amazonaws.com
Authorization: AWS:<accesskey>:<signature>
x-amz-date: <date>

but after doing all the above work my final request sent to amazon;

GET /<bucketname>/<filename>HTTP/1.1
x-flash-version: 10,0,2,54
User-Agent: Shockwave Flash
Host: s3.amazonaws.com

:( no custom header here;
plz can anyone suggests

[lionsign]

mfharis: When I sent,

var protocol:String = (secure) ? "https" : "http";
            var req:URLRequest = new URLRequest(protocol + "://" + AMAZON_ENDPOINT + resource);
req.method = method;
            var dateString:String = getDateString(new Date());
var dateHeader:URLRequestHeader = new URLRequestHeader("Date", dateString);
            var authHeader:URLRequestHeader = new URLRequestHeader("Authorization", getAuthenticationHeader(method, dateString, resource, contentType, hash));
            req.requestHeaders.push(dateHeader);
            req.requestHeaders.push(authHeader);
 
var req1:URLRequest = getURLRequest("GET", "/" + escape(bucketName));                    
                stream.load(req); 
 

throws Error #2096: The HTTP request header Date cannot be set via ActionScript.
Please help someone to step forward.

[Fary4u]

i've got the same problem have you fix this ?

[lionsign]

Authorization header is not supported by flash player. Have look of this http://help.adobe.com/en_US/FlashPla...estHeader.html