Instagram crossdomain issues

Hey all,

I’m trying to call an instagram api endpoint and having some issues.

Firstly, I’m calling

Security.loadPolicyFile("https://api.instagram.com/crossdomain.xml");

before I do anything.

When I try using a plain old loader, I get a Error #2048: Security sandbox violation: http://local.blurb.com/obt/Avatar.swf cannot load data from https://api.instagram.com/v1/users/self/?access_token=blah.

            var url:String = "https://api.instagram.com/v1/users/self/?access_token=" + profileData.authToken;
            
            var checkTokenRequest:URLRequest = new URLRequest(url);
            checkTokenRequest.method = URLRequestMethod.GET;
            
            var urlLoader:URLLoader = new URLLoader();
            urlLoader.addEventListener(Event.COMPLETE, onValidateTokenComplete); 
            urlLoader.addEventListener(IOErrorEvent.IO_ERROR, onError);
            urlLoader.addEventListener(SecurityErrorEvent.SECURITY_ERROR, onError);
            urlLoader.load(checkTokenRequest);

This is strange, because the policy file located at https://api.instagram.com/crossdomain.xml seems to be just fine.

So, I tried with a Loader where I specified a LoaderContext and changed checkPolicyFile=true. Inspecting the network stack I see that flash actually loads the file, but this time I get a Error #2124: Loaded file is an unknown type. URL: https://api.instagram.com/v1/users/self/?access_token=blah

Is there any way I can get to this data? Something wrong with Instagram’s policy file?