Flash returns a security error when we try to retrieve data from the My Space API: 

Error #2048: Security sandbox violation: http://ourdomain.com/ourpath/ourswf.swf cannot load data from http://api.msappspace.com/opensocial-api-v1.svc/JSON/opensocial/VIEWER/friends?opensocial_token=big long token&opensocial_mode=canvas&page=1&page_size=40."

The same code works in the Flash IDE and if we paste the link directly in the browser. The error occurs only when running the app in production connecting from our server to My Space. According to posts on the web and the Adobe documentation the crossdomain.xml file at api.msappspace.com would need to include http://ourdomain.com or have a public policy "*" to meet the requirements of the flash security model. 

We do pass in the auth token and we've tried both XML, JSON, the AS3 lib by JE, and writing our own URLLoader. All exhibit the same pattern: works in IDE, and pasting link in browser, does not work in production.

How do we request to have our domain added to the crossdomain policy file?

thanks! 

See if this helps: http://developer.myspace.com/Community/blogs/devteam/archive/2008/04/03/important-rest-api-code-update.aspx 

 Would you please repost the link? It seems to be cut off. thank-you!

 NM...

http://developer.myspace.com/Community/blogs/devteam/archive/2008/04/03/important-rest-api-code-update.aspx

(I was able to get it all by viewing page source) 

We tried api.myspace.com with the same result. How can we get added to the crossdomain.xml file?

Since this is a sandbox error, and only in our production deploy, is there any other explanation?

I appreciate any suggestions

Let me see if Johnny can look at your file. I'll tag this for him

Our APIs are only intended for use ON MySpace at this time, which I'm assuming is why you cannot pull that data. 

Thanks for having Johnny look into this. Please let me know if I can provide any additional information.

Should I interpret Stephanie's message to mean it is not possible to use the AS3 library by Joseph Estrada outside of MySpace? I'm unclear as to why it is available then? I'm not being critical, just trying to understand.

thank you for your help

Jason 

It is not available at this time to anyone other than MySpace/Fox Interactive companies (ex: Photobucket). It is on the site for them to use.