Hi Fabien,

Marketplace applications shouldn't use ClientLogin for authentication but
instead rely on 2-legged OAuth.
We have a series of tutorial on developing applications for the Google Apps
Marketplace, including one for PHP:

http://code.google.com/googleapps/marketplace/tutorial_php.html

I think it addresses your questions.
Please go through it and feel free to ask if anything is still unclear.

Claudio

On Thu, Jan 27, 2011 at 8:27 PM, Fabien Joaquim <
[email protected]> wrote:

> Hi,
>
>  I don't know if this is the good place for this but here it goes:
>
> I'm trying to develop a Google App that can be installed in a domain.
> In app's dashboard from domain, I want to enable additional settings
> so Domain admin declares which of his Domain groups will have the
> users for my App. This is my manifest xml (i've changed real values
> with {comments}):
>
> <?xml version="1.0" encoding="UTF-8" ?>
> <ApplicationManifest xmlns="http://schemas.google.com/
> ApplicationManifest/2009">
>  <Name>{Name of the App as it appears on Domain Dashboard}</Name>
>  <Description>{App Description}</Description>
>  <Support>
>    <Link rel="support" href="{url of my site for support page}1" />
>    <Link rel="manage" href="{my web site (https)}/googleapp/?manage=$
> {DOMAIN_NAME}" />
>  </Support>
>
>  <Extension id="navLink" type="link">
>    <Name>{Name}</Name>
>    <Url>{my web site (https)}/googleapp/?access=${DOMAIN_NAME}</Url>
> <!-- ${DOMAIN_NAME} is not a comment -->
>    <Scope ref="userFeed"/>
>    <Scope ref="groupFeed"/>
>    <Scope ref="nicknameFeed"/>
>    <Scope ref="dataAPI"/>
>  </Extension>
>
>  <Extension id="realm" type="openIdRealm">
>    <Url>{my web site (https)}</Url>
>  </Extension>
>
>  <Scope id="userFeed">
>    <Url>https://apps-apis.google.com/a/feeds/user/#readonly</Url>
>    <Reason>This application manages Users.</Reason>
>  </Scope>
>
>  <Scope id="groupFeed">
>    <Url>https://apps-apis.google.com/a/feeds/group/#readonly</Url>
>    <Reason>This application manages Groups.</Reason>
>  </Scope>
>
>  <Scope id="nicknameFeed">
>    <Url>https://apps-apis.google.com/a/feeds/nickname/#readonly</Url>
>    <Reason>This application manages Nicknames.</Reason>
>  </Scope>
>
>  <Scope id="dataAPI">
>    <Url>https://docs.google.com/feeds/</Url>
>    <Reason>This app allows to share documents in your exams and
> courses.</Reason>
>  </Scope>
> </ApplicationManifest>
>
>
> Now, when the user from its dashboard uses the Additional Settings
> link, he/she is taken to the URI googleapp/?manage=${DOMAIN_NAME} of
> my site. There, there is a code I wrote using PHP to make curl calls
> to the Provisioning API because i want to retrieve the groups of the
> user so he can choose which one will store the users of my App. But
> the Provisionning API always give me a 401 Not authorized HTTP error.
> I've looked in the DOCS and I can communicate to the Provisioning API
> using an auth token given to me by a previous call to the ClientLogin
> API, but this requires to know the password of the Domain user.
>
> So, my question: how can you use the Google Provisioning API of a
> domain when you are a Google App?
>
> Thanks in advance
>
> --
> You received this message because you are subscribed to the Google Groups
> "Google Apps Domain Information and Management APIs" group.
> To post to this group, send email to
> [email protected].
> To unsubscribe from this group, send email to
> [email protected]<google-apps-mgmt-apis%[email protected]>
> .
> For more options, visit this group at
> http://groups.google.com/group/google-apps-mgmt-apis?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google Apps Domain Information and Management APIs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-apps-mgmt-apis?hl=en.

Reply via email to