An article with a sum up from the GWT team:
http://googlewebtoolkit.blogspot.com/2010/10/using-dynamic-host-page-for-gwt-apps.html

The way we serve our GWT app (embedded in JSP) is very similar, only
we have one more filter.

On Oct 21, 12:33 pm, "l.denardo" <lorenzo.dena...@gmail.com> wrote:
> Hello, I don't know if this can work for you...
> In our app we authorize users recording email addresses in datastore.
> WE use a custom admin page where we add user emails (or entire
> domains) to allow users to access our app.
> When a user logs in, we check if he's authorized and we serve the
> application if he is, otherwise we prompt an error message.
>
> Maybe you can call an immediate redirect to logout url from your
> serving page so unauthorized users get immediately logged out.
>
> Notice that this requires you to set up a user authorization mchanism
> on your own. There's no option to filter users using regular APIs.
> This is a lack I hope will be removed, and maybe one of the
> improvements from AppEngine for business (the central management
> console seems to go towards this direction).
> Furthermore, I guess there's no way to generate User objects from a
> user email address. You need to know an "auth domain" to get the
> unique identifier, and that seems something hard to guess especially
> if you use openID (I never tested this, so maybe I'm wrong).
> Using only the email address to filter users is not the best thing to
> do, but it's ok for us.
>
> Hope this can be useful
> Regards
> Lorenzo
>
> On Oct 21, 6:30 am, Didier Durand <durand.did...@gmail.com> wrote:
>
> > Hello,
>
> > I implemented UserService with GWT to get the login service of Google
> > Accounts. Works fine with the provided login and logout links.
>
> > But, Google Accounts will accept login for all the accounts it knows
> > (much much more than my application with a few users only)
>
> > How can I force logout of a user that Google Accounts accepts right
> > after the login because my application doesn't know this user ?
>
> > Thanks
> > didier

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine for Java" group.
To post to this group, send email to google-appengine-j...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine-java+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.

Reply via email to