How to implement a secure authentication model to a Flex 4 / CF9 app?

observing the network communication between the flex client and the server

I realized each AMF packet actually has a header that contains a  JSESSIONID variable by default

first of all - how can I access this token on the AMF packet header from a cfc method?

and second - do I need to add this token once a user had been authenticated on the cf9 side to some session dictionary containing all authenticated users?

what is the simplest way to validate each cfc method agaist this session dictionary?

do I need to implement it manually on each cfc method I've created?

I realize I'm guessing my way around here

and sure this is quite a generic question

not wanting to re-invent the wheel, yet trying to avoid over complexity

would really appreciate some clarity

cheers

cosmits

this is truely surprising

such a generic situation, an application with user authentication

yes, true, it is a flex client and a coldfusion server

so? how do you implement it in this scenario?

not a clear answer in sight

as if it was such an isoteric question...

so quite...

I hope it's the weekend...

come on people!!!

give us a hand! wil ya?

does it have to do with RemoteObject setRemoteCredentials & cflogin?

am I getting warm?