Hi Dave,

On Mon, Aug 3, 2009 at 1:58 PM, Dave<dabo...@gmail.com> wrote:
>
> A couple questions on tokens:
>
> 1) I am reading the documentation on using AuthSub for web
> applications. I am concerned and confused by this statement:
>
> "Google Accounts is not set up to manage large numbers of tokens, and
> in fact will not issue more than ten valid tokens for any one user to
> a web application."
>
> What exactly does this mean? By "user", are you referring to me (the
> developer of the app), or to the users who will be using my app?

'User' here means the user being authenticated. As far as I'm aware,
authsub doesn't even have any concept of an application - it doesn't
care who's requesting the authorization.

>
> I plan to store only 1 session token per app user (for access to
> spreadsheets), but could potentially have many more than 10 users
> accessing my app at the same time. If the limit is 10 valid tokens per
> app user (at a time), then this is not a problem since I will have
> just 1 token per user. But if it's 10 tokens per app overall at a
> time, then this will limit me. I'm pretty sure it's the former, but
> wanted to be sure.

The only potential issue is if your users are using 10 other services
that also use AuthSub - in which case the session tokens will not
remain valid for all 11 (your app being the 11th).

>
> 2) Is it considered good practice to store user session tokens in the
> Google data store (associated with a user's id)?

That's fine.

-Nick Johnson

>
> Thanks so much,
> Dave
> >
>



-- 
Nick Johnson, Developer Programs Engineer, App Engine

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appengine@googlegroups.com
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to