This is the second release related to a Services module ZendAMF server extension (Drupal 7, Services v3.0). First time around was pretty much a proof of concept; bunch of changes were made that will hopefully make it a more serious proposal.
List of changes
- Changed from function-based service to a class-based one in order to facilitate debugging.
- Implements a rudimentary key-based authentication scheme. Note: i'm no security guru, i'm sure this will require actual encryption down the line. In its current form, it's just a shared key system, vulnerable to a man-in-the-middle attack; plus, i'm guessing the key can be retrieved by decompiling the SWF. This authentication scheme does act like your typical lock: should keep out most, but definitely vulnerable to a few.
- Integrates ZamfBrowser for debugging (requires extra download).
- Handles errors a little better now by throwing AS3-catchable errors (still a work in progress)
- Various bug fixes
To install:
- Install the Services modules (dev)
- Download the zendamf-7.x-0.4.tar.gz
- Unpack in "sites/all/modules/services/servers" (this assumes "Services" is already installed) or in "sites/all/modules/".
- Download the latest ZendAMF, unpack and move the Zend folder ("library" folder) to "sites/all/libraries"
- (optional) Download ZamfBrowser, unpack in the same spot (rename folder "ZamfBrowser").
- Create the service's endpoint (Admin > Configuration > Web Services > Services)
- Use 'zendamf' for everything for now.
- Luckily, this should be it.
Heads up:
- Don't forget to activate the resource you want to use
- Don't forget to turn on debug if so required
- ZendAMF Authentication is disabled in debug mode!!! The authentication mechanism relies on AMF headers to carry the key, and ZamfBrowser does not allow to add header to the input call (at the time of writing).