Re: [web2py] Re: Forcing SSL mode (on GAE)

2013-10-02 Thread Py Dev

Hi,

you use the yaml configuration to force ssl, such as:

handlers:
- url: /youraccount/.*
  script: accounts.py
  login: required
  secure: always


see 
https://developers.google.com/appengine/docs/python/config/appconfig#Python_app_yaml_Secure_URLs

Cheers!

pd

Am Donnerstag, 7. Februar 2013 08:24:43 UTC+1 schrieb Philip Kilner:

 Hi, 

 On 06/02/13 20:45, howesc wrote: 
  if you want all requests in SSL it sounds like the best thing to me. 
  

 Yes, it's working very well from my PoV - but my needs are very simple 
 in that I want to force SSL for everything. I'm used to doing this in 
 Apache, so haven't previously had to think about it enforcing it within 
 the app. 

 There was a browser-specific issue where e.g. Firefox worked 
 immediately, but Chrome blocked the jQuery scripts from Google's CDN on 
 the basis that they were insecure. Changing the link to the scripts to 
 https sorted that. 

  note that on GAE if you want to use SSL and a custom domain you have to 
  purchase additional add-ons to the GAE service.  https on the 
  appspot.com domain is free. 
  

 Understood - I'm happy withe the appspot.com URL, FWIW. 


 -- 

 Regards, 

 PhilK 


 'a bell is a cup...until it is struck' 



-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
web2py-users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to web2py+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [web2py] Re: Forcing SSL mode (on GAE)

2013-02-06 Thread Philip Kilner

Hi,

On 06/02/13 20:45, howesc wrote:

if you want all requests in SSL it sounds like the best thing to me.



Yes, it's working very well from my PoV - but my needs are very simple 
in that I want to force SSL for everything. I'm used to doing this in 
Apache, so haven't previously had to think about it enforcing it within 
the app.


There was a browser-specific issue where e.g. Firefox worked 
immediately, but Chrome blocked the jQuery scripts from Google's CDN on 
the basis that they were insecure. Changing the link to the scripts to 
https sorted that.



note that on GAE if you want to use SSL and a custom domain you have to
purchase additional add-ons to the GAE service.  https on the
appspot.com domain is free.



Understood - I'm happy withe the appspot.com URL, FWIW.


--

Regards,

PhilK


'a bell is a cup...until it is struck'

--

--- 
You received this message because you are subscribed to the Google Groups web2py-users group.

To unsubscribe from this group and stop receiving emails from it, send an email 
to web2py+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.