Re: [appengine-java] custom authentication when using Google Apps domain

2010-02-25 Thread Scott Hernandez
It is very simple to know if you need to use google apps or not.
Here is the article about it:
http://code.google.com/appengine/articles/auth.html

1.) Do you want to authenticate users from a specific google apps
domain? (Note: Saying yes will exclude gmail and general google
accounts)

2.) Do you need to have a custom domain name?

If neither of there is true then you don't need google apps. If either
is true then you do.

If you *just* want a custom domain name then you will need to create a
free google apps account for your domain-name mappings; it will not
need to have any users created (your users will not be in there
because they will come from the google accounts authentication
domain).

So, to answer your question, create a free google apps account. Add
your domain mapping, and never go in there again.

Now, when it comes to security, and authorization, you will have to
write your own using some kind of application-based security (like a
filter). You will need to maintain your own roles (and membership).
This will most likely mean creating security entities keyed to their
google email address from the current logged in user. As I said above,
you will not need to pay for that authentication service (even with a
custom domain name).

Good luck to you :)

On Wed, Feb 24, 2010 at 11:54 PM, Stephan Hartmann hartm...@metamesh.de wrote:
 You can use Google Apps Standard accounts or common Google Accounts (e.g.
 Goggle mail) as well (you have to choose when you setup your app).
 If you choose not to use Google Apps Accounts for your app, you still can
 assign it a subdomain of your Google Apps domain.

 For implementing your own custom authentication i'd try
 http://securityfilter.sourceforge.net/
 It has a deployment descriptor-like configuration.
 If you choose SecurityFilter, you should take care of static files because
 GAE will serve them directly bypassing servlet filters.

 Regards,
 Stephan


 2010/2/24 Houston startup coder stephenh...@gmail.com

 We need users to be able to access our app on our domain, so I went
 into my Dashboard and clicked Add New URL to set this up, and then
 added a CNAME at GoDaddy.  We use Google Apps for our domain
 internally, but do not want the users of our App Engine app accessing
 Mail, Documents, Sites, etc.  However, my understanding is that the
 only way I could point a subdomain at our App Engine app was to use
 Google Apps and Add New URL.

 We're going to have an installed desktop application access our app
 via ClientLogin, and it's fine if that needs to talk to
 myapp.appspot.com in order to use HTTPS.  The plan is for the
 installed application to hide the credentials it uses to safely
 communicate with our App Engine application behind the scenes.

 The only time our users will directly interact with the App Engine app
 is when they login via a web browser.  For that, we'd like to use
 custom authentication because I don't want to have to pay $50/user/
 year for them to access via a Google Apps Premier account.  But it
 sounds like this means we can't safeguard portions of the site with
 the deployment descriptor if we're using custom authentication:


 http://code.google.com/appengine/docs/java/config/webxml.html#Security_and_Authentication

 Is this true?  How can we handle this?

 --
 You received this message because you are subscribed to the Google Groups
 Google App Engine for Java group.
 To post to this group, send email to
 google-appengine-j...@googlegroups.com.
 To unsubscribe from this group, send email to
 google-appengine-java+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/google-appengine-java?hl=en.


 --
 You received this message because you are subscribed to the Google Groups
 Google App Engine for Java group.
 To post to this group, send email to google-appengine-j...@googlegroups.com.
 To unsubscribe from this group, send email to
 google-appengine-java+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/google-appengine-java?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Google App Engine for Java group.
To post to this group, send email to google-appengine-j...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine-java+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.



[appengine-java] custom authentication when using Google Apps domain

2010-02-24 Thread Houston startup coder
We need users to be able to access our app on our domain, so I went
into my Dashboard and clicked Add New URL to set this up, and then
added a CNAME at GoDaddy.  We use Google Apps for our domain
internally, but do not want the users of our App Engine app accessing
Mail, Documents, Sites, etc.  However, my understanding is that the
only way I could point a subdomain at our App Engine app was to use
Google Apps and Add New URL.

We're going to have an installed desktop application access our app
via ClientLogin, and it's fine if that needs to talk to
myapp.appspot.com in order to use HTTPS.  The plan is for the
installed application to hide the credentials it uses to safely
communicate with our App Engine application behind the scenes.

The only time our users will directly interact with the App Engine app
is when they login via a web browser.  For that, we'd like to use
custom authentication because I don't want to have to pay $50/user/
year for them to access via a Google Apps Premier account.  But it
sounds like this means we can't safeguard portions of the site with
the deployment descriptor if we're using custom authentication:

http://code.google.com/appengine/docs/java/config/webxml.html#Security_and_Authentication

Is this true?  How can we handle this?

-- 
You received this message because you are subscribed to the Google Groups 
Google App Engine for Java group.
To post to this group, send email to google-appengine-j...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine-java+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.