How can this work in an authenticated application?

But the Aurigma Up application gets its own session, which of course no user is logged in to, so our site rejects the upload.

We could workaround by passing a session ID (or equivalent) through Aurigma Up via the href. Doesn't this exposes a security issue though? E.g. someone could view source and get the session id, and use this to spoof requests?

I also had other problems in this area.

Within IIS, Directory Security, I had to change Authentication Method from 'Integrated windows' to 'anonymous access', and had to change 'Secure Comms', unticking 'Require secure channel (SSL) (and browse to http: rather than https: on the ipad).

Is there a way of getting these working with Aurigma Up? Safari happily gives me a login dialog in these cases, but Aurigma Up just fails to upload images with an error.

Edited by user Tuesday, October 25, 2011 2:45:32 AM(UTC)  | Reason: Not specified

Sorry about the slow reply! I am only adding one file.

SSL

On accessing my site via https, Safari opens a window “Cannot Verify Server Idenitity: Safari cannot verify the identity of “<machine name>”. Would you like to continue anyway? Cancel, Details, Continue”, and Details shows “<machine name>, Not Trusted …” and an Accept button. Clicking Accept makes Safari work (my page appears).

On uploading image, Aurigma Up displays error “Upload Failure: Destination server is unreachable. Please contact the website technical team to resolve this problem.” There is no log from my web application, suggesting it was never reached.

Strangely, if I then access my site via http and upload an image, Aurigma Up displays error “Upload Failure: Redirect is not supported with this website (HTTP code 3xx received). Please contact the website technical team to resolve this problem.” Occasionally, the log from my web application suggests that the posted form data had PackageFileCount>0 but no “File0_0” set. (On unhandled exceptions, our web application logs them and redirects to an error page). In the end closing all the Safari tabs and Aurigma Up seems to 'clear' the error and I am able to upload images again.

IIS Authentication Method

On changing to Integrated Windows Authentication and refreshing Safari, Dialog appears ‘Authentication Required: <machine name>’. Entered username and password and clicking Login button works - my page is shown.

On uploading image, Aurigma Up displays error “Upload Failure: The upload has been interrupted due to some unexpected error. Please contact the website technical team to resolve this problem.” There is no log from my web application, suggesting it was never reached.

Changing back to Anonymous Access, and clicking ‘Start Upload’ in Aurigma Up immediately works again (photo uploads, brings correct page up in Safari, etc).

I'll get our SSL expert to look into this further. What SSL setup is required for Aurigma Up to work? We setup our own Certificate Authority using Active Directory, rather than using a public authroity (Verisign, etc). Do you support such a setup?

if (Request.HttpMethod == "POST" && Request["PackageGuid"] != null)
{
  //… Saving files …
}

What does this do / why is this necessary? Should we have an 'else' block? I notice similar code in the ASP.NET sample you can download, but not the sample on the site. The POST Fields 'PackageGUID' and 'PackageIndex' are not in the Aurigma Up API but are in the Image Uploader API.

How do I check this? I wasn't aware Aurigma Up used any cookies or session variables, I thought the information was passed to it in the query string and passed back in the POST data?

<location path="AppleUpload.aspx">

<system.web>

<authorization>

<allow users="*" />

</authorization>

</system.web>

</location>

For some reason it still doesn't work, but if I redirect my site to another site that has Windows authentication and then redirect it back to my site it works. Do you know why?