Hey Les, If I wanted to have my own login system and still use the Cloud End Points with some form of Auth, how would you advise going about starting this?
Thanks for your help :) On Tuesday, December 30, 2014 1:37:07 PM UTC-10, Les Vogel wrote: > > Hi Dakota, > > You might wish to look at the Identity-Toolkit > <https://developers.google.com/identity-toolkit/> or Firebase > <https://www.firebase.com/> for general purpose Auth. > > For GAE, you can have general gmail or domain specific auth -- ie all > Google accounts (Gmail, Google for Work / Education / Business / > Government, and anyone who's logged into Google). > > Correct - If you roll your own, you can't use GAE login or Endpoints with > Auth enabled. Nor can you roll your own Oauth2 and insert it into > Endpoints. You could issue your own Tokens and pass them as parameters, > always requiring HTTPS, however. I have a few examples of this using > Identity-Toolkit, but they are for Go & Android. > > Regards, > > Les > > > On Tue, Dec 30, 2014 at 1:10 PM, Dakota Pitts-Price <fallen...@gmail.com > <javascript:>> wrote: > >> Hi I am noob looking to expand my knowledge base outside of heavily >> managed services like Parse. >> I have done a few jobs in Parse, but I am looking for something that is >> more flexible and cheaper to use as an App Backend. >> I think the GAE is a good stepping stone, but I keep coming across the >> issue of Authentication. >> >> >> First it appears that there is no out of the box easy way to do a simple >> username and password login. >> -It seems like the best approach to this is using Django >> --Is there an equivalent framework in Java that is GAE compatible? >> >> Second it appears if you using your own Login system you can't use the >> builtin Auth with Google Cloud End Points >> -So it seems if you want to use the builtin Auth with cloud end points >> and still maintain control of your user login I would need to host my own >> Oauth2 Service. >> --Is there a way for me to host my own Oauth2 Service inside of the GAE? >> --This seems like how AWS works, should I consider just starting on their >> system instead of GAE? >> >> Thanks for reading :) >> >> *-Side note* >> *I have been Googling and researching this for about two days now and am >> surprised at the communities lack of support for non Google or non major >> Oauth user authentication in GAE.* >> *It is out of the question for many of my clients to not have self >> authentication for their apps/sites.* >> *So having an easy solution is important for me as I learn how to use a >> more powerful and complicated service. (pardon my noob, I have only been >> coding for a year or so)* >> >> *Also a lot of people respond negatively saying users don't want another >> account to remember, users don't want to trust you with their password, and >> you shouldn't want the responsibility.* >> *But none of that is true, every app I have worked on when given an >> option more users use username/password than a third party Oauth provider.* >> *Thus having the option is curial.* >> *Also its not unreasonable for a client to not want to rely on a major >> third party to authenticate their user base.* >> *I understand that this is putting more responsibility on me, but if the >> app is a simple little thing I imagine the users use a simple little >> password. * >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Google App Engine" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to google-appengi...@googlegroups.com <javascript:>. >> To post to this group, send email to google-a...@googlegroups.com >> <javascript:>. >> Visit this group at http://groups.google.com/group/google-appengine. >> For more options, visit https://groups.google.com/d/optout. >> > > > > -- > Les Vogel | Cloud Developer Relations | le...@google.com <javascript:> | > 408-676-7023 > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To post to this group, send email to google-appengine@googlegroups.com. Visit this group at http://groups.google.com/group/google-appengine. For more options, visit https://groups.google.com/d/optout.
