Google's cookies are different than each application on appspot.com.
So each application needs to specifically log out each user.

I just came to know about this.

You should provide a log out link.


On Wed, Aug 5, 2009 at 10:34 AM, Holger <w...@arcor.de> wrote:

>
> You are not wasting time - it's an important clarification.
>
> To my knowledge the logical steps are:
>
> 1. User want's to log into your application
> 2. You pass him to Google
> 3. He logs in with his Google account
> 4. Google returns a token with is stored as cookie
> 5. As long as this token exists the user module (don't know the Java
> name) treats the visitor as authenticiated.
> 5. It's your task to delete this token on user logout.
>
>
> >
>


-- 
Hrishikesh Bakshi

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appengine@googlegroups.com
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to