Authenticate using a token

Question

in this F LASH M EDIA SERV ER 4.0 DEVELOPER’S GUIDE document，
The control flow is as follows:
1The client SWF requests an authentication token from a third party.
2The third party returns the token to the client.
3The client sends the token with its connection request.
4Flash Media Server verifies the token with the third party system.
5Flash Media Server accepts the connection.
but not clear ，now ，i have token client script and  token server script， next how to do？

Answer 1

well the PHP Login Sessions  and swfObject controls whether or not the html page that the SWF is embedded in is allowed to embed no PHP login session no access to the embed page. Usually I also have an array of allowed users on the FMS serverside script this list is updated with loadVars or XML or manually I just described the core concept above. The details of how you use it or structure it all depends on your app and security analysis. Feel free to disagree with me I've never had an actual security  assement done on it by say a white hat.