API key compromised on AIR app?

I have made a small AIR app using kuler (and my API key).
(this is what it's like:
http://www.locus-delicti.com/test/kuler_colors/)
I was about to publish it at my website but i just thought
that this app includes my API key in the code and that probably it
would be compromised. Is that so? Does it even matter if it is?
(worst case it will be banner, right?)
Thanks,
Mitsos

Hi Chris,
Thanks a lot for your reponse. I tried the thing you suggested, but strangely no folder by that name (in the other thread you linked) existed, before or after the app crashed. I tried a few other things, like running the AIR app through the ADL, to see if that would produce the error log you were describing.
I got an error when using the ADL, 'initial content not found'. I thought maybe some of the assets weren't being loaded correctly, so I went through and put in loads of logging, using the SOS Max Logger. Whilst doing this, I decided to remove a trace() statement I had, or rather change it so it used the logger. This is what I changed:
From this:
trace("Load Progress: " + event.target.progress);
To this:
logger.debug("Load Progress: " + event.target.progress);
The event is a LoaderEvent, from the LoaderMax lib. After this change, the app worked after installation. I had to then back-track through all my changes to see what caused it, and found that this was it.
I'm a bit dumbfounded as to why this caused the problem. I still have other trace() statements in there, that cause no problems at all. Seemingly it's having the event.target.progress thing in there that makes the difference.
Anyway, thanks for your help Chris.

Similar Messages

License Keys for Adobe Air Apps

Many software applications require the end user to input a valid license key before proceeding with the installation. I have yet to come across an Adobe AIR application that employs this mechanism.
The question is how can i integrate such a mechanism into an adobe air app?

Two options:
a) Build a licensing verification scheme yourself
b) Use a 3rd party tool, such as NitroLM or Sharify or Shibuya

How to listen for key press when air app does not have focus

Hi,
I am developing a application in air and part of the functionality I need is the ability for the app to listen for when a specific key is pressed, even when the air app does not have focus.
Is there support for this for windows or mac? If not, how might this be accomplished? ANE?

Ok Mr. Smartass...Ok
I'm building a browser that is always open, and when
a user presses Ctrl+F1 (notice, just those two keys,
I don't care what else they press...) the browser
will open up. That way, you don't have to wait for it
to load all the time.You have two ideas here. One is having a universal key map that always gets ctrl-f1 sent to your app. The other is a program that is constantly running so that you don't have to wait for it to open up. The former is not possible (and this is a good thing) As warneria and I have been saying, it is bad design for an app to try to force an OS to implement this kind of feature.
If you're not going to help please don't post at all;
it's a waste of time for both you, me, and anyone
else who may need help on the same subject. Why wouldBelieve it or not, I am helping you.
See
http://www.google.com/search?hl=en&lr=&q=programming+code+side+effects
and
http://www.faqs.org/docs/artu/ch04s02.html
"Doug McIlroy's advice to �Do one thing well� is usually interpreted as being about simplicity. But it's also, implicitly and at least as importantly, about orthogonality."
anyone in their right mind who's trying to steal
people's passwords come out and say, "I'm not trying
to steal people's passwords!"wait, your question is why would someone trying to steal passwords say I'm not trying to steal passwords? I think duplicitous people in their right minds might try to trick you that way.
Beyond that, even if you're not a malicious hacker - and I am sure you are not - if someone posts a solution to your problem, malicious coders then will have learned how to do it. If you think you're programming or using these forums in a bubble, you are not.

Secret key API in an Ajax Adobe AIR app?

I'm building an AIR app with Ajax using an API that is
identical to flickr's API, with a shared secret key. The problem is
that the air installation package contains all the source and I
don't want to give away my shared secret. Is there any way to hide
the secret? Can I hide any of the source, or put the key in the
encrypted local store pre-installation, or somehow include this
shared secret within the app without giving it away?
I thought I had it figured out when I included it as a passed
param in the application descriptor (e.g.
<content>index.html?key=xxxxxx-secret=xxxxxxx</content>),
but then I see that even the application descriptor source is
included in the .air build! Is there anything I can do????
Thanks very much for any help!

thanks Jason - yes it does return an authentication token
after the user authorizes the application. The shared secret is
really just a way for the server to recognize the program using the
API. It is used to sign each transaction between the server and the
client through the API calls. By giving out the shared secret, I
would be giving anyone access to disguise themselves as our client
program. So if they do something wrong with it, our key would be
revoked, and our client program would no longer work.

AIR apps using Stratus - protecting developer key

How do we deploy an AIR app that uses Stratus and protect our developer key, since AIR is not encrypted?

Except that the "somehow" is really not going to happen, because the code can be decompiled, and Adobe has not provided any way to keep some protected data on the client side OR even uniquely identify a particular instance of an AIR app. Unless I am wrong and someone can explain how...

Is there no way to direct an AIR app's audio to different audio output devices?

I'm needing to make a couple of our AIR apps select certain audio devices to send their audio output to, and last year, somebody mentioned possibly using native extensions to do this. I had to start working on other things for a while, but I've come back to this (for the moment), and I've basically learned how to create native extensions.
But so far, they don't seem to provide me any special access to anything going on under the hood of an AIR app. When you stream live audio in through RTMP or RTMFP, the details of the audio are hidden from you. There doesn't appear to be any place where you can actually access the audio bytes that are being sent over the wire. You can specify a certain SoundTransform object for the NetStream to use, but that class is final and a vanilla Flash construct, so even if it may have a way to access the audio bytes, they're not acessible at all.
It really looks like, when a NetStream object starts streaming in live audio, there is no way under the sun to access the audio bytes and direct them to a certain audio output device, with or without extensions. Is this so? It would be unfortunate if Adobe didn't allow this, even through native extensions. Thanks.

Couple quick thoughts..
Limits are important. There's a large amount of work done to keep a clear separation between a users decision and a developers decision. For instance, you can't change a users default audio output because that clearly violates a users decision. That said, here's a whole mess of people debating the issue and actually eventually an undocumented COM API you can find that will actually let you do it in Vista/Win7 (but not 8), however don't expect that to be a 'good thing to do':
http://social.microsoft.com/Forums/en-US/9ebd7ad6-a460-4a28-9de9-2af63fd4a13e/programatica lly-setting-the-default-playback-device-and-recording-device?forum=windowspro-audiodevelop ment
You might want to get a beverage before reading that.
Aside that, RTMP is secured, which is why you can't gain access to the bytes. The entire purpose of it is to assure media developers that their media can't easily be copied/stolen. Adobe doesn't document their method of securing streams but they do publish the RTMP specification. It's entirely possible for you to create your own RTMP server and encryption method while delivering a RTMP stream to custom client that you code yourself which can read the stream. Here's the spec:
http://www.adobe.com/devnet/rtmp.html
So I'd say it would be unfortunate if Adobe did give you access to the bytes. You might as well just hand users a mp3 of whatever song is playing because they would steal media left and right.
That isn't to say you can't use a multitude of ways of getting the data going across the default output device. Plenty of apps (fraps/etc) capture video and mixed audio streams. But Adobe isn't going to give you the keys to the kingdom and let you decrypt their protected media protocol.

Embedding local .swf file in AIR app

Hi all,
I want to include a small Google Maps .swf file as part of my overall HTML based AIR application and I was wondering whether anyone here has had any success in achieving this. Currently, my set up looks like this:
AIR xml file:
<?xml version="1.0" encoding="utf-8" ?>
<application xmlns="http://ns.adobe.com/air/application/1.5">
    <id>gmaps</id>
    <filename>gmaps</filename>
    <version>0.1</version>
    <initialWindow>
        <title>gmaps2</title>
        <content>gmaps2.html</content>
        <systemChrome>standard</systemChrome>
        <transparent>false</transparent>
        <visible>true</visible>
        <width>1200</width>
        <height>1000</height>
        <x>20</x>
        <y>20</y>
        <minimizable>true</minimizable>
        <maximizable>true</maximizable>
        <minSize>850 636</minSize>
        <resizable>true</resizable>
    </initialWindow>
My gmaps2.html file:
<html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
        <title>GMAPS</title>
    </head>
    <body>
        <div id="map_canvas" name="map_canvas">
            <object
              classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"
              codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0"
              width="800px"
              height="600px">
                  <param name="movie" value="app:/flex/GMapsController.swf">
                  <param name="quality" value="high">
                  <param name="flashVars" value="key=CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CC">
                  <embed
                    width="800px"
                    height="600px"
                    src="app:/flex/GMapsController.swf"
                    quality="high"
                    flashVars="key=CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCC"
                    pluginspage="http://www.macromedia.com/go/getflashplayer"
                    type="application/x-shockwave-flash">
            </object>
          </div>
    </body>
</html>
My GMapsController.mxml file:
<?xml version="1.0" encoding="utf-8"?>
<mx:WindowedApplication xmlns:mx="http://www.adobe.com/2006/mxml" layout="absolute">
<maps:Map xmlns:maps="com.google.maps.*" id="map" mapevent_mapready="onMapReady(event)" width="100%" height="100%"
    url="http://my.domain.com" key="CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC"/>
    <mx:Script>
        <![CDATA[
            import com.google.maps.LatLng;
            import com.google.maps.Map;
            import com.google.maps.MapEvent;
            import com.google.maps.MapType;
            private function onMapReady(event:Event):void {
                this.map.setCenter(new LatLng(40.736072,-73.992062), 14, MapType.NORMAL_MAP_TYPE);
            public function setLocation(lat:Number, long:Number):void {
        ]]>
    </mx:Script>
</mx:WindowedApplication>
When I open my air app, I don't get any error messages and it appears that the swf is not loaded at all.
When I switch my AIR .xml file to point to the GMapsController.swf file instead of the gmaps2.html file, it works perfectly - this gives me the impression that there's either:
1. Something wrong with including a WindowedApplication in a HTML file.
2. Something wrong with including a local .swf file in HTML based application.
I've tried referencing the .swf file in the html file from a remote server with the following:
<div id="map_canvas" name="map_canvas">
             <object
               classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"
               codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0"
               width="800px"
               height="600px">
                   <param name="movie" value="app:/flex/GMapsController.swf">
                   <param name="quality" value="high">
                   <param name="flashVars" value="key=CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CC">
                   <embed
                     width="800px"
                     height="600px"
                     src="http://my.server.com/GMapsController.swf"
                     quality="high"
                     flashVars="key=CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCC"
                     pluginspage="http://www.macromedia.com/go/getflashplayer"
                     type="application/x-shockwave-flash">
             </object>
           </div>
but no luck with that.
Any help would be greatly appreciated.
Thanks
Sean

Brandon,
Thanks for the link - I wasn't aware about the HTML Loader class and how it relates to loading Google Maps. I'm not using the HTML loader class though, so I'm not sure how it relates to the issue I'm having.
I'm currently following the advice outlined at http://help.adobe.com/en_US/AIR/1.5/devappshtml/WS4B441C24-BAE3-4110-91FD-A4E5EEFB2467.htm l where the SWF object is loaded through JavaScript, but I haven't had any luck with it yet. I'm pretty new to Flex/Flash/AIR applications - I'm starting to think it could be something simple wrong with my .mxml file:
<?xml version="1.0" encoding="utf-8"?>
<mx:WindowedApplication xmlns:mx="http://www.adobe.com/2006/mxml" layout="absolute">
<maps:Map xmlns:maps="com.google.maps.*" id="map" mapevent_mapready="onMapReady(event)" width="100%" height="100%"
    url="http://my.server.com" key="CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC"/>
    <mx:Script>
        <![CDATA[
            import com.google.maps.LatLng;
            import com.google.maps.Map;
            import com.google.maps.MapEvent;
            import com.google.maps.MapType;
            private function onMapReady(event:Event):void {
                this.map.setCenter(new LatLng(40.736072,-73.992062), 14, MapType.NORMAL_MAP_TYPE);
            public function setLocation(lat:Number, long:Number):void {
        ]]>
    </mx:Script>
</mx:WindowedApplication>
I've tried creating a different .mxml file from the code outlined http://www.mikechambers.com/blog/2007/11/07/air-example-native-drag-and-drop/ (just as an example), just to make sure that the problems I'm having are not related in any way to the Google Maps API for Flash. Even with this second .mxml file, I still haven't had any luck in getting the swf content to load locally from the HTML file. However, if I set the content element in the AIR .xml file to look like this:
<content>DragAndDropExample.swf</content>
... it works as expected.
So, this has started me thinking that you cannot include a .swf file which has a base tag of WindowedApplication in a HTML based application? Can anyone confirm that this thinking is correct?
Has anyone here managed to load .swf content in a HTML based application using the code outlined at http://help.adobe.com/en_US/AIR/1.5/devappshtml/WS4B441C24-BAE3-4110-91FD-A4E5EEFB2467.htm l?
Thanks
Sean

Beefing up Secirity and Encryption in Air Apps

Hello,
We are working on an AIR app currently and concerned about
security when it comes to local data and content. We have come up
with a few ideas which may help.
1. Storing Data in the local encrypted datastore
This is a great feature, unfortunately, you need to get the
information into it in a secure way. Storing usernames and
password...urls etc in plain text in the AIR file is a bad idea.
Pulling the info down from the server and firing it in is better,
but this adds reliance on a server, which developers may or may not
have access to, and still may have security issues.
Would it not be possible to have a new option/panel added to
the Air settings window that allowed developers to add a list
variables/values that they wanted set in the local encrypted
datastore upon the initial install of the application. These
variables could be encrypted in the AIR package perhaps, using a
key/encryption routine known only by Adobe and removed from
existence as soon as they were added safely to the local enc
datastore. Perhaps a function could then be added to the API that
allowed these variables to be pulled back out and decrypted. I
realize the local datastore is encrypted, but what we are talking
about is getting the data into it in a more secure way that does
not necessarily rely on a server or having to store the keys in
plain text in the air package.
2. Encrypting the descriptor file and/or SWF content.
Although the swf format is easy to decompilable, if you
encrypted it, it's a much harder go. The end user really should
have no need to ever see this info, and developers could then
potentialy use things like the Application ID or publisher ID to
help secure other aspects of their app. Also, if its encrypted,
perhaps this is were extra variables could go. Once again, the
encryption routine/method used to pull this off could be
proprietary and known only to ADOBE. If developers could safely
store there own encryption keys in the local datastore, they could
even come up with there own routines, or use other encryption
standards that already exit to protect there content.
Just to wrap up, I really think AIR is great, but I think it
could be fantastic if ADOBE worked a little magic and chipped of
the security aspects in AIR a bit. I think this is one of the only
major stumbling blocks I can see for mass adoption for serious
industrial strength apps using AIR.
Where there's a will there is a way, and perhaps there are
others out there with innovative ideas that could contribute to
beefing up AIR security.

Here are some screen shots:
Any Help?

How do I set the stage quality in an AIR app?

In this article you can set the stage quality to 16X16LINEAR. I'm not able to do this in my AIR app:
<?xml version="1.0" encoding="utf-8"?>
<s:WindowedApplication xmlns:fx="http://ns.adobe.com/mxml/2009"
xmlns:s="library://ns.adobe.com/flex/spark"
xmlns:mx="library://ns.adobe.com/flex/mx"
width="600" height="625"
preinitialize="preinitializeHandler(event)"
>
<fx:Script>
<![CDATA[
import mx.core.FlexGlobals;
import mx.events.FlexEvent;
import mx.managers.SystemManager;
protected function preinitializeHandler(event:FlexEvent):void {
systemManager.topLevelSystemManager.stage.quality = StageQuality.HIGH_16X16_LINEAR;
trace("quality=" + systemManager.topLevelSystemManager.stage.quality); // HIGH
]]>
</fx:Script>
</s:WindowedApplication>
Flash Player 11.2 graphical gem | kaourantin.net

From Adobe docs:
"In the desktop profile of Adobe AIR, quality can be set to StageQuality.BEST or StageQuality.HIGH (and the default value is StageQuality.HIGH). Attempting to set it to another value has no effect (and the property remains unchanged). In the moble profile of AIR, all four quality settings are available. The default value on mobile devices is StageQuality.MEDIUM."
StageQuality - Adobe ActionScript® 3 (AS3 ) API Reference

Admin Rights for Adobe AIR apps

Which Admin rights are needed on a system to install a .AIR file on a system? In our Enterprise scenario users do not have Admin rights on the system. And whenever user tries installing an AIR app an error is thrown for the same. I want to know what are the least (Admin) rights that we need to give to a user on a WindowsXP system so that he can install air apps?

Hello,
Unfortunately, there isn't a simple answer to this question because AIR isn't in complete comtrol over the full set of files and registry keys touched during an install - we rely on Windows Installer for that. However you can find additional information about this at:
Does Installing an AIR Application Require Admin Rights?
What are Administrative Rights, Anyway?
You might also want to vote for this idea: Installation of Adobe AIR apps without having administrative privileges
Hope this helps,
Chris

How to get Adobe Air-apps to run *properly*? (Voddler ecpecially)

First: I am running AMD64, and have installed the bin32-adob-air from AUR.
The problem is, this does not work as it should. Air apps are never "installed" like they would be in Windows, or Ubuntu with the adobe-air from adobe installed. This causes problems with remembering configs and storing data between instances. Wimp, t.ex. will never remember my password, now matter how many times I check the remember password-box. And When running VOddler it just won't find the config file.
I am trying to run Voddler in linux now, following this. But it won't work.
I just get an "error reading config file" message when starting it using the adobe-air command (ie. the script from the package. Thinking the problem might be caused by the script running air apps from a temp dir, i aslo tried to run
[gert@blad opt]$ /opt/adobe-air-sdk/bin/adl -nodebug /opt/airapps/VoddlerPlayer/META-INF/AIR/application.xml /opt/airapps/VoddlerPlayer
after unpacking the Voddler Files there, but no luck.
I see that there are a newer version of Voddler out now, and I will try that, but I'd appreciate any help with this spesific issue.
Also, I would like to know if there is any way to get the "full Air experience" where you jut click-and go, and can install Air-apps the simple, proper way "everybody else" does it. Cause Air right now is a major hassle. Is there any chance of getting the Adobe-Air installer from Adoe work on Arch, or at least get a similar result? Integrated in the system, detected in the browser on webpages etc.
Last edited by naguz (2010-05-15 17:01:25)

Tried again with the command taken from firefox appended to the script (instead of §1 §2 etc.) and got:
(adl:17512): Gtk-WARNING **: Kunne ikke finne temamotor i module_path: «murrine».
(adl:17512): Gtk-WARNING **: Kunne ikke finne temamotor i module_path: «murrine».
Gtk-Message: Failed to load module "gnomesegvhandler": libgnomesegvhandler.so: cannot open shared object file: Ingen slik fil eller filkatalog
Error #2032
http://api.voddler.com/vnet/index/login-token
Parameter: version:2
Parameter: token:3c034c484e3ed6217ec0b4b6a6cd01c9
Response received
http://api.voddler.com/vnet/index/pre-movie-request
Parameter: movie:2721821284152452737
Parameter: session:952b4840d0a91e896c210622ee83333a_0c965a262382ad33a9479ebfaddf9a3d
Parameter: crid:2721821284152752803
Parameter: version:2
Response received
PreMovieResult: [object Object]
movieID: 2721821284152452737
MOVIEREQUEST: false movieModel.resumeTime: 0
http://api.voddler.com/vnet/index/movie-request
Parameter: movie:2721821284152452737
Parameter: session:952b4840d0a91e896c210622ee83333a_0c965a262382ad33a9479ebfaddf9a3d
Parameter: version:2
Parameter: crid:2721821284152752803
Parameter: resume:0
Response received
Adding to playlist url: 0p000001000_e000335_n0017_s0318_he3052b084510fe31419083eb165aa4bc_00000000000000000000000000000000_d59845ff23b2b6f22d3f3ee9020ab34af_t02
Logg error
(Object)#0
clientCode = 30
clientVersion = "3.10.1680"
ctxId = ""
errorCode = 1000
extra = "Token login result triggered"
os = "Linux"
userId = "'2721821230480292729'"
vnetVersion = "5522"
DRM check...
ReferenceError: Error #1069
movieMetaDataReceived: 2004
NetStream.Play.Reset
NetStream.Play.Start
Voddler.Open.Done
Main movie metaData received
DRM Fatal Error!
Logg error
(Object)#0
clientCode = 30
clientVersion = "3.10.1680"
ctxId = ""
errorCode = 7744
extra = "General Error: 7744"
os = "Linux"
userId = "'2721821230480292729'"
vnetVersion = "5522"
ReferenceError: Error #1069
It errors out after the Voddler window has been "Rerwinding the tape" for about 10 secs.
EDIT: I moved my voddler folder to /opt/airapps so I could use your file without any edits to rule out typos.
Now, the voddler player starts from firefox in wine. But I immediately also get the "Oops, we noticed you didn't watch the whole movie"-window pops out at the same time, and i get a similar error as above.
DRM check...
ReferenceError: Error #1069
movieMetaDataReceived: 2008
NetStream.Play.Reset
NetStream.Play.Start
Voddler.Open.Done
Main movie metaData received
DRM Fatal Error!
Logg error
(Object)#0
clientCode = 30
clientVersion = "3.10.1680"
ctxId = ""
errorCode = 7744
extra = "General Error: 7744"
os = "Linux"
userId = "'2721821230480292729'"
vnetVersion = "5522"
ReferenceError: Error #1069
I guess voddler cancels the DRM "lease" as soon as the error box pos up, giving me this question. Seems Firefox doesn't communicate properly with the air-app. Or something else I don't get. complete output from firefox run: pastebin
Last edited by naguz (2011-01-11 22:32:16)

Will Adobe AIR apps work on iOS (Javascript/HTML)?

Hello,
I haven't been able to find any definitive answer on whether Adobe AIR apps using Javascript and HTML can work on iOS.
Anyone know for sure?
And if so, what happens with the APIs available through these swfs that we currently include:
networkInfoWrapper.swf
servicemonitor.swf
applicationupdater_ui.swf
Many thanks
Stephen

The answer is no. Apps developed for AIR using HTML and JavaScript are not supported on iOS or other mobile platforms. The mobile platforms do include a StageWebView component that can be used to load and display HTML and JavaScript. However, it is entirely different than the HTMLLoader control used on the desktop platforms (for HTML-based AIR apps). You cannot, for example, call any AIR/Flash APIs from JavaScript running in a StageWebView. In general, very little communication is possible between your ActionScript application code and the JavaScript code running in the StageWebView object.

Displaying fb Friends in Adobe AIR app

First off, I realize I'm completely in over my head here.
I am a designer... not a programmer. Sure, I've set up some "quizzes" on facebook... but nothing like what I'm trying to do here. So, I'm hoping to get some quick and simple help from someone here.
Anyway... here's my problem...
I've made a fun little Adobe AIR app using Flash CS4. When ran it makes your computer screen look like you're logging into the Umbrella Corporation from the Resident Evil franchise. It has company data, surveillance cameras and other stuff. It's totally for fun and doesn't "do" anything. Just wanted to make an AIR app late one night and this is what I did.
Now, however, I would like to make it so that you can login to your facebook account and then view a "database of Umbrella Employees"... which... in reality... would simply be a list of your facebook friends with pictures! The descriptions of what they "do" could be randomly generated from a file or something... or it could be grabbed from some posts they've made or something. But the friend pictures and names are really what I'm wanting to show.
I have looked and looked all over for a simple "downloadable" example of this. I've found some things, but everything is like reading an encyclopedia... and, like I said, I'm simply not that smart.
Does anyone have a Flash CS4 .fla file that you could share with me to show me how to do this?
I'm serious when I say I can't figure much out... so please include all library files and anything else I need to know (like upload this to your server here) and stuff.
If you help, and I "release" this (obviously I can't make money on it) I'll put an Easter egg in for you with your profile or picture or whatever you like!
Here's hoping for some help...
Noel

start here: http://code.google.com/p/facebook-actionscript-api/

Digitally signing AIR apps for the client

How does a developer digitally sign a client's application
without requiring the client to have to purchase the certificate?
We want to do this for them. Are there any options for the
developer?

What happens when a certificate applied to an AIR app.
expires? Does anyone know the technical details of the process? Is
the expiration date embedded in the cerficate? Will the installer
just revert to an UNKNOWN publisher or present another message,
such as certificate expired? Will the installer still work?
My Web guy thinks we can purchase the certificate for our
client after discussing this process with them, by being listed as
the technical contact and getting their contact info (like we can
with SSL certificates). We do NOT want to put the customer through
the below steps. There is a document though on Thawte's website
that says the business and technical contacts must be from the same
company though. This document
(https://www.thawte.com/guides/pdf/enroll_codesign_eng.pdf) says
nothing about AIR though.
Here's some text Thawte sent me:
ENROLLING:
1. Visit
https://www.thawte.com/process/retail/new_devel?language=en&productInfo.productType=devel 2
2 Select the Adobe AIR Developer Certificate
3. Enter the required information in the enrollment process
"step 1 Configure your enrollment"
Note: As part of this process a private/public key pair will
be generated by thawte. The private key will be automatically
stored within the Firefox keystore.
4. Click Submit to complete your enrollment.
5. Click Accept after confirming that all information entered
on the enrollment page is correct.
6. After the certificate is issued, log into the status page
using the link provided in the confirmation email to download the
certificate.
7. Click on "Fetch Certificate" and the certificate will
automatically be saved to the Firefox keystore.
8. Export the private key and certificate from the Firefox
keystore.
The exported file can now be used to sign the Adobe Air
application.
FIREFOX INFO:
You must use FireFox to initiate the Adobe AIR developer
certificate browser and to obtain the certificate.
1. Visit
https://www.thawte.com/process/retail/new_devel?language=en&productInfo.productType=devel 2
2 Select the Adobe AIR Developer Certificate
3. Enter the required information in the enrollment process
"step 1 Configure your enrollment"
Note: As part of this process a private/public key pair will
be generated by thawte. The private key will be automatically
stored within the Firefox keystore.
4. Click Submit to complete your enrollment.
5. Click Accept after confirming that all information entered
on the enrollment page is correct.
6. After the certificate is issued, log into the status page
using the link provided in the confirmation email to download the
certificate.
7. Click on "Fetch Certificate" and the certificate will
automatically be saved to the Firefox keystore.
8. Export the private key and certificate from the Firefox
keystore with this solution: SO6899
The exported file can now be used to sign the Adobe Air
application.
The a guide to signing the application can be found in SO6896
Note: When exporting the private key and certificate from
Firefox, it ill be exported in a .p12 (pfx) format which ADT, Flex,
Flash Authoring, Dreamweaver, and Apatana tools can consume.
Thawte will perform an Identity verification process, which
may take 2-5 working days, and may need additional information.
https://www.thawte.com/ssl-digital-certificates/free-guides-whitepapers/pdf/enroll_codesig n_eng.pdf
After verification is complete, Thawte will email you
instructions on how to retrieve the certificate.
Please make sure that you retrieve the certificate using
Firefox.
How to export the private key and certificate from Firefox to
sign Adobe®AIR™applications
Solution ID: SO6899
Adobe®AIR™ Developer Certificates can use a .pfx
or a .p12 file to sign applications. Please follow the steps below
to export the certificate with the private key from Firefox:
1. A. Start Firefox
B. Select Tools
C. Select Options
D. Select Advanced
E. Select Certificates
F. Select Manage Certificates
Note: On a MAC OS go to Firefox > Preferences >
Advanced > Certificates > Manage Certificates
2. Select your signing certificate you retrieved from the
status page and click the Backup button.
3. Enter the file name and location to export the certificate
and private key to and click Save.
4. If you are using the Firefox Master Password, you will be
prompted for your master password for the software security device.
5. From the "Choose a certificate backup" password dialog
box, enter a password to create/export the certificate.
6. Enter the password twice and click OK. You should receive
a successful backup password message.
7. Use this .p12 (pfx) file within ADT, Flex, Flash
Authoring, Dreamweaver, or Apatana tool.
When prompted for a password, use the password for the .p12
file export in step 5.
8. Sign the application.
Follow the steps below to sign Adobe®AIR™
applications:
1. Open AIR Application and Installer Settings from the Adobe
Air application
2. Click Set button under Installer settings, next to Digital
signature
3. In the Digital Signature dialog box, click Browse.
4. Select the certificate.
5. Enter a password.
6. Click OK
The application now has the digital signature applied.

HTML-based AIR app with transparent UI, shadows, etc.?

I'm debating on whether to use Flex or HTML/Ajax for a widget
in a project. If I make an HTML-based widget, is it possible to
have UI tricks like shadows and transparency, basically, NOT being
confined to a standard OS "box" window? Is this possible?
Thanks.

Yes it is possible to do this with an HTML-based AIR app.
However, since the visual elements will be HTML-elements, not
display objects, you can't use the Flash APIs for shadows and
transparency. Also, in a transparent window, SWF and PDF content in
HTML cannot be displayed.

API key compromised on AIR app?

Similar Messages

Maybe you are looking for