[google-appengine] Re: FederatedLogin: Is logout supported?

2010-12-08 Thread Daniel Florey
Thanks, I've starred the issue.
I thought Google would have changed something as they removed the
logout note from the docs.

On Dec 8, 4:47 am, Julian Namaro  wrote:
> You can star the issue I filed a while ago about 
> this:http://code.google.com/p/googleappengine/issues/detail?id=3301
>
> On Dec 8, 4:22 am, dflorey  wrote:
>
>
>
>
>
>
>
> > Thanks for the suggestion, but don't think this is a feasible solution
> > for a real world application.
> > Is it possible to redirect to the proposed Google logout links and
> > pass something like a next url so that the user will end up on the
> > login page of my app?
>
> > Right now I'm using PAPE=0 in my own OpenID implementation, but I'd
> > like to switch to the GAE implementation in order to be able to send
> > emails on the behalf of the current user.
>
> > What a mess :-(

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appeng...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.



[google-appengine] Re: FederatedLogin: Is logout supported?

2010-12-07 Thread Julian Namaro
You can star the issue I filed a while ago about this:
http://code.google.com/p/googleappengine/issues/detail?id=3301



On Dec 8, 4:22 am, dflorey  wrote:
> Thanks for the suggestion, but don't think this is a feasible solution
> for a real world application.
> Is it possible to redirect to the proposed Google logout links and
> pass something like a next url so that the user will end up on the
> login page of my app?
>
> Right now I'm using PAPE=0 in my own OpenID implementation, but I'd
> like to switch to the GAE implementation in order to be able to send
> emails on the behalf of the current user.
>
> What a mess :-(
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appeng...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.



[google-appengine] Re: FederatedLogin: Is logout supported?

2010-12-07 Thread dflorey
Thanks for the suggestion, but don't think this is a feasible solution
for a real world application.
Is it possible to redirect to the proposed Google logout links and
pass something like a next url so that the user will end up on the
login page of my app?

Right now I'm using PAPE=0 in my own OpenID implementation, but I'd
like to switch to the GAE implementation in order to be able to send
emails on the behalf of the current user.

What a mess :-(

On 7 Dez., 16:06, "l.denardo"  wrote:
> You must log out from the Google Account you used to log in from your
> app, otherwise you'll get logged in again (logout from your app works:
> in fact, you're being logged in again with a new session): after all,
> that's what single sign on is meant to do :-)
>
> What you can do is deploy a servlet at /_ah/openid_logout which says
> to your user "you logged out: logout from Google too" and provide the
> logout link for Google Accounts 
> (e.g.https://mail.google.com/mail/?logout&hl=en)
> or Google Apps (https://mail.google.com/a/mydomain.com/?logout&hl=en-
> GB).
>
> AFAIK there's no other chance to do it: I can confirm Atlassian Jira
> uses this approach to manage this use case (that's where I copied it
> from, btw).
>
> Regards
> Lorenzo
>
> On Dec 7, 3:31 pm, dflorey  wrote:
>
>
>
>
>
>
>
> > Do you know any working app with a proper OpenID workflow where I can
> > test if this really works?
> > I want to achieve that a user can login to the app, logout and can
> > login with a different account of the same domain (without being
> > forced to clear the cache manually).
>
> > On 6 Dez., 12:33, "l.denardo"  wrote:
>
> > > Logout works *for your app*. This means that your user is logged out
> > > from your app, but must explicitly log out from his Google Account.
> > > If the user comes back to your app while still being logged in to
> > > Google and you accept login without any intermediate step, he will be
> > > logged in again in your application.
>
> > > If he logged out from Google, or you provide an intermediate step
> > > (e.g. your app login page asks if you want to login with Google
> > > accounts or Google Apps) everything will work fine.
>
> > > Regards
> > > Lorenzo
>
> > > On Dec 6, 10:17 am, dflorey  wrote:
>
> > > > Hi,
> > > > is logout currently supported with FederatedLogin on app engine?
> > > > Is it possible to use the logout url and login afterwards with a
> > > > different email on the same domain or will it automatically login with
> > > > the previous email until I empty all cookies?
> > > > I've read about this a while ago in the docs, but the note is gone so
> > > > I'm wondering if this is now fixed.
>
> > > > Thanks,
>
> > > > Daniel

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appeng...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.



[google-appengine] Re: FederatedLogin: Is logout supported?

2010-12-07 Thread l.denardo
You must log out from the Google Account you used to log in from your
app, otherwise you'll get logged in again (logout from your app works:
in fact, you're being logged in again with a new session): after all,
that's what single sign on is meant to do :-)

What you can do is deploy a servlet at /_ah/openid_logout which says
to your user "you logged out: logout from Google too" and provide the
logout link for Google Accounts (e.g. 
https://mail.google.com/mail/?logout&hl=en)
or Google Apps (https://mail.google.com/a/mydomain.com/?logout&hl=en-
GB).

AFAIK there's no other chance to do it: I can confirm Atlassian Jira
uses this approach to manage this use case (that's where I copied it
from, btw).

Regards
Lorenzo

On Dec 7, 3:31 pm, dflorey  wrote:
> Do you know any working app with a proper OpenID workflow where I can
> test if this really works?
> I want to achieve that a user can login to the app, logout and can
> login with a different account of the same domain (without being
> forced to clear the cache manually).
>
> On 6 Dez., 12:33, "l.denardo"  wrote:
>
> > Logout works *for your app*. This means that your user is logged out
> > from your app, but must explicitly log out from his Google Account.
> > If the user comes back to your app while still being logged in to
> > Google and you accept login without any intermediate step, he will be
> > logged in again in your application.
>
> > If he logged out from Google, or you provide an intermediate step
> > (e.g. your app login page asks if you want to login with Google
> > accounts or Google Apps) everything will work fine.
>
> > Regards
> > Lorenzo
>
> > On Dec 6, 10:17 am, dflorey  wrote:
>
> > > Hi,
> > > is logout currently supported with FederatedLogin on app engine?
> > > Is it possible to use the logout url and login afterwards with a
> > > different email on the same domain or will it automatically login with
> > > the previous email until I empty all cookies?
> > > I've read about this a while ago in the docs, but the note is gone so
> > > I'm wondering if this is now fixed.
>
> > > Thanks,
>
> > > Daniel

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appeng...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.



[google-appengine] Re: FederatedLogin: Is logout supported?

2010-12-07 Thread dflorey
Do you know any working app with a proper OpenID workflow where I can
test if this really works?
I want to achieve that a user can login to the app, logout and can
login with a different account of the same domain (without being
forced to clear the cache manually).

On 6 Dez., 12:33, "l.denardo"  wrote:
> Logout works *for your app*. This means that your user is logged out
> from your app, but must explicitly log out from his Google Account.
> If the user comes back to your app while still being logged in to
> Google and you accept login without any intermediate step, he will be
> logged in again in your application.
>
> If he logged out from Google, or you provide an intermediate step
> (e.g. your app login page asks if you want to login with Google
> accounts or Google Apps) everything will work fine.
>
> Regards
> Lorenzo
>
> On Dec 6, 10:17 am, dflorey  wrote:
>
>
>
>
>
>
>
> > Hi,
> > is logout currently supported with FederatedLogin on app engine?
> > Is it possible to use the logout url and login afterwards with a
> > different email on the same domain or will it automatically login with
> > the previous email until I empty all cookies?
> > I've read about this a while ago in the docs, but the note is gone so
> > I'm wondering if this is now fixed.
>
> > Thanks,
>
> > Daniel

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appeng...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.



[google-appengine] Re: FederatedLogin: Is logout supported?

2010-12-07 Thread dflorey
Hi,
the logout is not working on your app.
I logged in for the first time with my Google account, the account
page asked for my credentials.
After that I logged out.
Now I want to login with a different Google account.
But when I click on the login link, I get logged in directly without
getting the chance to enter a different Google account.

Or am I doing something wrong?


On 6 Dez., 12:14, Peter Ondruska  wrote:
> Works for me:https://tenant-check.appspot.com/
>
> On 6 pro, 10:17, dflorey  wrote:
>
>
>
>
>
>
>
> > Hi,
> > is logout currently supported with FederatedLogin on app engine?
> > Is it possible to use the logout url and login afterwards with a
> > different email on the same domain or will it automatically login with
> > the previous email until I empty all cookies?
> > I've read about this a while ago in the docs, but the note is gone so
> > I'm wondering if this is now fixed.
>
> > Thanks,
>
> > Daniel

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appeng...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.



[google-appengine] Re: FederatedLogin: Is logout supported?

2010-12-06 Thread l.denardo
Logout works *for your app*. This means that your user is logged out
from your app, but must explicitly log out from his Google Account.
If the user comes back to your app while still being logged in to
Google and you accept login without any intermediate step, he will be
logged in again in your application.

If he logged out from Google, or you provide an intermediate step
(e.g. your app login page asks if you want to login with Google
accounts or Google Apps) everything will work fine.

Regards
Lorenzo

On Dec 6, 10:17 am, dflorey  wrote:
> Hi,
> is logout currently supported with FederatedLogin on app engine?
> Is it possible to use the logout url and login afterwards with a
> different email on the same domain or will it automatically login with
> the previous email until I empty all cookies?
> I've read about this a while ago in the docs, but the note is gone so
> I'm wondering if this is now fixed.
>
> Thanks,
>
> Daniel

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appeng...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.



[google-appengine] Re: FederatedLogin: Is logout supported?

2010-12-06 Thread Peter Ondruska
Works for me: https://tenant-check.appspot.com/

On 6 pro, 10:17, dflorey  wrote:
> Hi,
> is logout currently supported with FederatedLogin on app engine?
> Is it possible to use the logout url and login afterwards with a
> different email on the same domain or will it automatically login with
> the previous email until I empty all cookies?
> I've read about this a while ago in the docs, but the note is gone so
> I'm wondering if this is now fixed.
>
> Thanks,
>
> Daniel

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appeng...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.