# Flex Rest Security

**URL:** <https://www.ruby-forum.com/t/flex-rest-security/138088>\
**Category:** Rails\
**Created:** [May 20, 2008, 4:02am UTC](https://www.ruby-forum.com/t/flex-rest-security/138088 "2008-05-20T04:02:13Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ADADAD](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/85e7bf/32.png) [@ADADAD](https://www.ruby-forum.com/u/ADADAD)\
**Post date:** [May 20, 2008, 4:02am UTC](https://www.ruby-forum.com/t/flex-rest-security/138088/1 "2008-05-20T04:02:13Z")

</div>

Hello,  
I am trying to grasp how people have best solved the integration of  
FLEX  
Rest services and restful\_authentication. Since FLEX is stateful, how  
are  
you securing the access to the web services? For example, once the Flex  
app  
calls the login method, returns success, how does the rails app know the  
user is authenticated when a request for /CONTROLLER/index comes in? I  
dont  
believe Flex uses sessions so I assume there is another mechanism here.

Thanks  
Adam