The simplest would probably be just to use incredibably hard to guess URLs - and then the GAE app knows the real url, or how to calcuate it. (eg using md5 hashes with a shared secret)
Its not totally secure, people without an account could still access them, if they where given the url, or if they figured out your url structure and managed to brute-force it or similar. But to be honest the level of security is pretty comparable of that of the Google accounts. Alternativally you could use some sort of short lifetime tokens. The app in the background requests a token from your server and that token is then passed in the webpage - that the browser then uses to request the image. You could extend this to use cookies to also authenticate the final user (the user also needs the cookie on their machine to get the object) On Mon, Nov 3, 2008 at 4:19 PM, jivany <[EMAIL PROTECTED]> wrote: > > Part of me thinks this is a stupid question and I'm over-complicating > the solution but... > > I have a server with a large amount of storage space available. I'd > like to use that space to serve up images through a GAE app. The > reason I want a GAE app is so I can integrate with my Google Apps on > my domain. The reason I want to use the other server is because it's > paid for and has a much higher storage limit than the 500MB on GAE. > > I think the easiest way is to just have the GAE app get the browser to > pull the images from the external server. My concern is finding a way > to secure the external images so that they can only be accessed with a > valid Google account (as if they were on GAE). > > Can anyone point me in the right direction to do something like this? > Am I over-complicating this? > > > > -- Barry - www.nearby.org.uk - www.geograph.org.uk - --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en -~----------~----~----~----~------~----~------~--~---
