Using Token based security in an air application

[JadeFreeman]

Hello,

Wondering if anybody out there is using token based security in flex air or mobile applications?  The only way I've found to get it to work is thru using an updated proxy configuration that allows for dynamic tokens.

What I'd really like to be able to do is embed the token in my mobile or air application and not have it expire.  My problem so far with tokens is that they are either url or ip address based neither of which works well for an air or mobile application developed with the flex sdk.

Thanks in advance!

Jade

[JoshWerts]

I know this is an old post but if it helps anyone searching, the Air mobile app uses its local app:/ based url as the "Referer" when sending HTTP requests.

Example: app:/MyMobileApp.swf (Check fiddler headers for Referer to be sure).

Plug that into "Web Application URL or HTTP Referrer" on your token generation page with appropriate credentials and embed away.

[JadeFreeman]

Thanks!  I will definitely try this out..