Hello, There is a lot of ways of doing and securing your application.
GAE has an UserService<https://developers.google.com/appengine/docs/java/gettingstarted/usingusers> and easy tutorials the get it rolling. You have security constrains<https://developers.google.com/appengine/docs/java/config/webxml#Security_and_Authentication>as well, that can secure the urls you want and the only thing you need is to define them in your web.xml To secure services i would use Filters<https://developers.google.com/appengine/docs/java/config/webxml#Filters>rather than implementing the security in each servlet doGet/doPost, this way you have all security centralized and the same for all servlets calls. Cheers! On Wednesday, August 7, 2013 7:10:35 PM UTC+2, Jimin Park wrote: > > I am new to the web application development and recently ventured on a > journey to build one (was not aware of the servlets prior to this so I am > really new). I am stuck on creating the log-in page using OpenID. > > If I want every single page to require the user to be logged in to even > view, how would I achieve this using servlets? Would I be putting in user > login status at the beginning of doGet() of all servlets and if the user is > not logged in, redirect to the log-in page and redirect back to the > servlet? This seems like some boiler-plate code, is there some kind of > configuration I can do to achieve the same thing easily? > > Also, I do appreciate Google's openID documentation, it is not detailed > enough for me to understand how the work flow is in this framework. Is > there a helpful tutorial site anyone knows? Had not much luck in google > searches either... > > Thanks guys! > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To post to this group, send email to google-appengine@googlegroups.com. Visit this group at http://groups.google.com/group/google-appengine. For more options, visit https://groups.google.com/groups/opt_out.
