I'd like to allow users to admin their http://smw.appspot.com account via an email sent from their Gmail account. This would satisfy at least two use cases: 1. bulk addition of users to their smw.appspot.com group. (Gmail is convenient and familiar because of its contacts interface, etc.) 2. Converting a smw.appspot.com account into a "kiosk mode" account with most web services shutoff. All control (including converting kiosk account back to regular account) is done via email.
But the problem is that email can be so easily faked. Can anyone think of a way to do this and be sure the email comes from the user's gmail account? Since it's a gmail email being sent to google appspot you'd think there would be a way to make this work, no? TIA, any ideas appreciated. Tim --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en -~----------~----~----~----~------~----~------~--~---