[google-appengine] Re: hiding private key

2009-01-23 Thread Bill
Brian, If you plan on storing the key in a file, I would suggest using the svn:ignore feature: http://svnbook.red-bean.com/en/1.5/svn-book.html#svn.advanced.props.special.ignore You can tell svn to not check in any file that matches your private filename. Just let your collaborators know they'r

[google-appengine] Re: Google's Source Control Vision

2009-01-23 Thread Bill
I use git for controlling my App Engine source code. ( For example, I released my early attempt at a blog over at http://github.com/DocSavage/bloog ) When you deploy on App Engine, you can set the version ID of your code. I've created a shell script which automatically generates the git version

[google-appengine] Re: 网页中有汉字 ,就会产生错误,不知是啥原因

2009-01-23 Thread kang
在文件开始加上#coding=utf-8 2009/1/22 网页中有汉字,就会产生错误,不知是啥原因 > > this code right in local development environment, but error on update > to server. > > import wsgiref.handlers > from google.appengine.ext import webapp > > class MainPage(webapp.RequestHandler): > def get(self): >self.response.headers

[google-appengine] Re: hiding private key

2009-01-23 Thread thebrianschott
Dave, Thank you for clarifying that. I guess I would have to put the key into the datastore, but that may not be practical for me either. I have not decided yet how much access to the datastore I will give users of my app, yet. I don't think they need any, but I cannot be sure now. In any case,

[google-appengine] Re: Custom Login System

2009-01-23 Thread bowman.jos...@gmail.com
By the way, relying on javascript to handle hashing passwords and such isn't a reliable solution. If that's what's coming from the browser, then anyone else can just sniff that hash and send it as the password with the username. In the end you're relying on data from the client being secure, which

[google-appengine] Re: Custom Login System

2009-01-23 Thread bowman.jos...@gmail.com
gaeutilities - http://gaeutilities.appspot.com/ - has a session class built specifically to work around that problem. The session id (used for matching data to the session) is never passed to the browser, rather is uses a session token system. By default a session token is valid for only 5 seconds

[google-appengine] Re: is gaeutilities sessions the only 3rd party session manager?

2009-01-23 Thread bowman.jos...@gmail.com
I have some ideas now that I think will help out over all. Keep an eye out for the next release. It won't be perfect, but unless Google can provide some sort of mechanism for session tokens via their User API, or possibly give us another less write heavy storage mechanism to handle tasks like thes

[google-appengine] Re: Flash ExternalInterface and GAE

2009-01-23 Thread BTang
I guess I must have been mistaken that the flash could communicate with javascript cause I tried it again and it cannot. I posted my examples... they both use the same exact html file and same exact swf file: lets-tango.appspot.com <- hosted on google app engine digitillusion.ethereallan.org/ext

[google-appengine] Re: How to append to BlobProperty

2009-01-23 Thread Alexander Kojevnikov
db.Blob is a subclass of str. Try this code: class Storage(db.Model): blob = db.BlobProperty() def append(self, value): self.blob += value s = Storage() s.blob = 'abc' s.append('def') s.put() On Jan 24, 3:20 am, Will wrote: > Hi all, > > I'd like to append a byte string to a

[google-appengine] Re: Django, including a file

2009-01-23 Thread Alexander Kojevnikov
> Has anyone got include working? I've been searching everywhere but > find any simple examples of AppEngine including templates! > {% include %} works for me, I'm using app-engine-patch. Which version of Django do you use? What is your folder structure, where the templates are kept (both the par

[google-appengine] Complex tagging of items

2009-01-23 Thread George Sudarkoff
I have a bit of a problem coming up with an efficient data model/algo for a project I am working on: I have a few hundred items, each tagged with zero or more tags. I need to be able to fetch items that, for example, are tagged with tag1 AND (tag2 OR tag3) AND NOT tag4. Any help would be greatly

[google-appengine] Re: Google App Engine with ClientLogin Interface

2009-01-23 Thread ghostrocket
aha. i had the service set to "apps" on the initial token request. i set it to ah and all is well. On Jan 23, 6:34 pm, ghostrocket wrote: > Well ... now I am a little closer. > > It seems if I pull the auth token I am given when I log directly into > the website, and navigate > to:http://yourap

[google-appengine] Re: hiding private key

2009-01-23 Thread David Symonds
On Sat, Jan 24, 2009 at 7:41 AM, thebrianschott wrote: > I think I can save my secret key in a static file that is not "add"ed > to the svn and I was told by David that everything (source, etc) is > secreat that is committed to the appspot. So as long as the static > file is not "add"ed to the s

[google-appengine] Calculating Ranks

2009-01-23 Thread indra
Hi, I want to calculate rank of an entity (say a user) based on some property (say score, which keeps changing). Ryan mentioned during the last appengine chat that there is an implementation which does this and that you guys are planning to open source it. Just wanted to know how long it might ta

[google-appengine] Re: Google App Engine with ClientLogin Interface

2009-01-23 Thread ghostrocket
Well ... now I am a little closer. It seems if I pull the auth token I am given when I log directly into the website, and navigate to: http://yourapp.appspot.com/_ah/login?auth=myauthtoken [making sure i've already cleared all cookies etc] I WILL receive the Set-Cooke: ASCID directive. If I use

[google-appengine] Re: Marzia Please Help with Account ID Problems!

2009-01-23 Thread Devel63
Marzia, I tried "reply to author" and sent you the info this morning. Please let me know if you didn't get it, and I'll send it again. Thanks for you help! On Jan 23, 9:13 am, Marzia Niccolai wrote: > Hi, > > Please send me the apps and email address involved. > > -Marzia > > On Thu, Jan 22,

[google-appengine] verification & uploading, spurious account mixing

2009-01-23 Thread cincinnatus
I have two testing domains, one verified and one not. By verified, I mean the process of giving a telephone number, having Google SMS a code, then re-entering the code. My App Engine code was mistakenly uploaded into the wrong Premiere Edition account and verification was done from my cell. Now I

[google-appengine] Re: is gaeutilities sessions the only 3rd party session manager?

2009-01-23 Thread jeremy
aah, i see. On Jan 23, 10:08 am, "bowman.jos...@gmail.com" wrote: > Yea but R would be rotated every 15 seconds which would decrease the > window in which a session is really valid by a large margin.That's why > the session token needs to be tied to every account. > > On Jan 23, 1:04 am, jeremy

[google-appengine] Google App Engine with ClientLogin Interface

2009-01-23 Thread ghostrocket
I seem to be able to get the "Auth" token correctly, but attempts to use it in the header when I access later pages still just return me the login page's HTML. >From what I understand from previous posts, I need to make a call to http://yourapp.appspot.com/_ah/login?auth=myauthtoken wihich will t

[google-appengine] Re: Custom Login System

2009-01-23 Thread MajorProgamming
"Javascript on your login form should first hash the password, then hash the result with a salt - say the session id" I assume that's only true if I opt out of SSL? "That way the contents of the cookie are no use to anyone, all useful info is stored in memcache, where attackers can't get it." But

[google-appengine] Re: Custom Login System

2009-01-23 Thread Andrew Badera
Typically, or at least in my experience, salting is md5/sha1/whatever(password+salt) rather than md5(md5(password)+salt) ... Thanks- - Andy Badera - and...@badera.us - (518) 641-1280 - Tech Valley Code Camp 2009.1: http://www.techvalleycodecamp.com/ - Google me: http://www.google.com/search?q=andr

[google-appengine] Re: Custom Login System

2009-01-23 Thread Greg
First, if you are not a security expert, consider using Django's authentication framework. Online security is not easy - there are a lot of things you have to get right, and missing just one of them means you've failed. I have a reasonable amount of experience with online security, so I built my

[google-appengine] Re: hiding private key

2009-01-23 Thread thebrianschott
Hugo, I think I can save my secret key in a static file that is not "add"ed to the svn and I was told by David that everything (source, etc) is secreat that is committed to the appspot. So as long as the static file is not "add"ed to the svn, it's secure, isn't it? Thanks, On Jan 23, 2:03 pm,

[google-appengine] Re: django + GAE + app-engine-patch + i18n (+ Mac)

2009-01-23 Thread boson
Well as I said I installed the getttext package from Fink (archive of Mac GNU packages, etc.). It didn't come with xgettext, and there's no xgettext on my system other than "xgettext.pl" in the Apple developer folders. When I symlinked that as "xgettext", I got a bunch of errors running makemess

[google-appengine] Secure Feeds (RSS, ATOM)

2009-01-23 Thread MajorProgamming
Does anyone know of how to deal with secure feeds: For example, suppose I have a feed that should only give infromation to a user when s/he's logged in. What's the best (and most secure) way to implement this?:? Thanks, --~--~-~--~~~---~--~~ You received this mess

[google-appengine] Custom Login System

2009-01-23 Thread MajorProgamming
I am currently working on a App that requires that I use a custom sign in method. I was wondering if there are any security flaws I should be aware of... Also: I was wondering if I must use SSL for proper security? Is the best way to maintain sessions through using cookies? Do I have to perfo

[google-appengine] Re: Static File Questions

2009-01-23 Thread MajorProgamming
I don't mean when the user uploads files. I mean when I do (i.e. through appcfg.py). Does it hurt performance if GAE has like 700 static files from me...? On Jan 9, 4:34 pm, niklasr wrote: > example: upload a 2 MB file through a html form, split it serverside > into 2 or 3 parts, then store the

[google-appengine] Re: hiding private key

2009-01-23 Thread Hugo
Based on David's suggestion: you can upload a file that is not included in your svn repository. Conceptually, it's like having a file that you never "svn add" in your checked out source tree. (But that's a little unsafe, if you assume checkouts are deletable, hence the idea of keeping it in a safe

[google-appengine] Re: Google's Source Control Vision

2009-01-23 Thread Duncan
On Jan 23, 1:33 am, GenghisOne wrote: > Does the current version of Google's App Engine vision address > distributed software development and source control? > > Or put more practically, how can a couple of distributed software > developers collaborate on a Google App? For instance, how can I pul

[google-appengine] Re: Google's Source Control Vision

2009-01-23 Thread Roberto Saccon
AppEngine is for deployment. For development you can use what you like, e.g. GoogleCode, Github or whatever else best fit your needs. Roberto On Jan 22, 10:33 pm, GenghisOne wrote: > Does the current version of Google's App Engine vision address > distributed software development and source con

[google-appengine] Re: App Engine Console 1.0beta3 released

2009-01-23 Thread johnP
Just downloaded it, and it plugged easily into my project. Looks great so far. Thanks! johnP On Jan 23, 12:28 am, Jason Smith wrote: > Hi, Group. > > I am pleased to announce the release of App Engine Console version > 1.0beta3. Please seehttp://con.appspot.com/for demos, documentation, > a

[google-appengine] Re: Value for db.GeoPtProperty()

2009-01-23 Thread Marzia Niccolai
Hi, You should be able to do this like: objB.bcoordinates = db.GeoPt(100.1, 41.1) -Marzia On Fri, Jan 23, 2009 at 12:26 PM, arnie wrote: > > Hi > In my data model class Business, I have one field named "bcoordinates" > that is of type db.GeoPtProperty. When I go to add an entry in > Business

[google-appengine] Re: django + GAE + app-engine-patch + i18n (+ Mac)

2009-01-23 Thread tcs 241
Hello, I had the same error on WinXP. That is because 'GNU Gettext' is not installed or not added in systems Path. I am Guessing it will be similar case on Apple. Before using Django, try to run xgettext under Shell. Chef Free U.S. Immigration Guide http://visachoice.appspot.com On Jan 22, 3:

[google-appengine] App Engine flaky?

2009-01-23 Thread ussuri
Hello! I uploaded the first version of my app yesterday, and at once I had problems with db errors: the same request (add A, update a counter in B) raised an error three times in a row: A was added, but B was not updated for some reason until the fourth try. And on the fourth try everything went

[google-appengine] Re: Pyton 3 and google_appengine error

2009-01-23 Thread Marzia Niccolai
Hi, Google App Engine does not work with Python 3. You will need Python 2.5 for Google App Engine. -Marzia On Fri, Jan 23, 2009 at 9:10 AM, jassy wrote: > > hi > Please help > > i have installed Pyton 3 and google_appengine. and trying to run the > first sample of hello world gives me the fol

[google-appengine] Re: Marzia Please Help with Account ID Problems!

2009-01-23 Thread Marzia Niccolai
Hi, Please send me the apps and email address involved. -Marzia On Thu, Jan 22, 2009 at 11:49 PM, Devel63 wrote: > > Hi Marzia, > > I cannot successfully invite developers to an app using Google Apps > authentication: when the invited developer clicks on the Apps > confirmation link, they get

[google-appengine] App Engine Console 1.0beta3 released

2009-01-23 Thread Jason Smith
Hi, Group. I am pleased to announce the release of App Engine Console version 1.0beta3. Please see http://con.appspot.com/ for demos, documentation, and downloads. App Engine Console is an interactive Python session running in the server, which you use from a web browser. Designed to be embedded

[google-appengine] Pyton 3 and google_appengine error

2009-01-23 Thread jassy
hi Please help i have installed Pyton 3 and google_appengine. and trying to run the first sample of hello world gives me the following error can any one help me with it . F:\Program Files\Google\google_appengine>dev_appserver.py helloworld Traceback (most recent call last): File "F:\Program F

[google-appengine] NonAuthSubToken when trying to access google contacts API

2009-01-23 Thread eugened
I have a problem authorizing my application and user to read my own google contacts. I am using gdata.py-1.2.4 library and did everything as outlined in documentation. Here is a brief description of what I did: I was trying to adapt code from article "Using the YouTube Data API with App Engine and

[google-appengine] Flash ExternalInterface and GAE

2009-01-23 Thread BTang
I've been struggling with this for the past couple hours now and I really don't know what could be wrong. I'm simply trying to get Javascript to communicate text with Flash. I found this great example with this source http://blog.circlecube.com/wp-content/uploads/2008/02/ActionscriptJavascriptCom

[google-appengine] Google's Source Control Vision

2009-01-23 Thread GenghisOne
Does the current version of Google's App Engine vision address distributed software development and source control? Or put more practically, how can a couple of distributed software developers collaborate on a Google App? For instance, how can I pull down the latest source and update it? Thx. -

[google-appengine] How to append to BlobProperty

2009-01-23 Thread Will
Hi all, I'd like to append a byte string to a db.BlobProperty, but can't figure out how. For example, class Storage(db.Model) blob = db.BlobProperty() def append(s, ext) s.blob += ext# want something like this I've tried to construct a db.Blob, like this: tmp = db.Bl

[google-appengine] Re: Is there some sort of cookie issued by google apps can take advantage of for sessions?

2009-01-23 Thread bowman.jos...@gmail.com
I've added this as issue 1010 - http://code.google.com/p/googleappengine/issues/detail?id=1010 On Jan 22, 9:15 pm, "bowman.jos...@gmail.com" wrote: > There's been some ongoing discussion about the approach I and others > have been taking to session management in our appengine applications. > I

[google-appengine ] Re: 网页中有汉字, 就会产生错误,不知是啥 原因

2009-01-23 Thread Pikaurd Chen
Well, my app has Chinese character too, but it works good Try specify encoding in py file and good luck On Jan 22, 2009, at 5:53 PM, 网页中有汉字,就会产生错误,不知是啥原因 wrote: > > this code right in local development environment, but error on update > to server. > > import wsgiref.handlers > from google.appen

[google-appengine] Value for db.GeoPtProperty()

2009-01-23 Thread arnie
Hi In my data model class Business, I have one field named "bcoordinates" that is of type db.GeoPtProperty. When I go to add an entry in Business class through its object say objB like this objB.bcoordinates(100.1,41.1) it does not work. it seems to me that this is wrong but i am not able to point

[google-appengine] Re: Cant start my helloworld sample

2009-01-23 Thread ahYeop
Thanks Joel. Now it works. Thank you again On Jan 22, 1:56 am, Joel Odom wrote: > Read the error message closely.  You misspelled python. > > > > On Wed, Jan 21, 2009 at 11:44 AM, ahYeop wrote: > > > Hi all, > > > I follow the Hello World guide but still have problem to start Apps > > Engine. H

[google-appengine] Re: is gaeutilities sessions the only 3rd party session manager?

2009-01-23 Thread bowman.jos...@gmail.com
Yea but R would be rotated every 15 seconds which would decrease the window in which a session is really valid by a large margin.That's why the session token needs to be tied to every account. On Jan 23, 1:04 am, jeremy wrote: > "What I see as a concern with your approach is what happens when th

[google-appengine] Re: Can I See Google Product Ideas Code?

2009-01-23 Thread sweed
yeah, i realized that shortly after posting the question... now I wish I could see the moderator code, seems like one hell of a powerful tool thanks anyway though barry On Jan 20, 2:51 pm, "Barry Hunter" wrote: > 'Productideas' seems to be just an adaptation of Google Moderator > > http://mode

[google-appengine] Re: Django, including a file

2009-01-23 Thread Larry
Has anyone got include working? I've been searching everywhere but find any simple examples of AppEngine including templates! On Jan 22, 4:58 pm, Larry wrote: > Thanks, but I really just want to use includes. > > On Jan 22, 4:52 pm, djidjadji wrote: > > > Have you looked at template-inheritance

[google-appengine] Re: What means "Deployment" ???

2009-01-23 Thread Yeradis
Thank you very much and have a nice day On Jan 22, 6:12 pm, Dan Sanderson wrote: > A "deployment" is the act of uploading your app to App Engine using the > "appcfg.py update ..." command.  You are allowed to upload an app up to 250 > times every 24 hours (1 day). > For other definitions of quot

[google-appengine] Re: What means "Deployment" ???

2009-01-23 Thread Yeradis
Thank you very much and have a nice day On Jan 22, 11:11 am, Qian Qiao wrote: > On Thu, Jan 22, 2009 at 18:09, Yeradis wrote: > > > Hello and good day to everybody > > > Sorry by my english > > > I have a question: > > > What means Deployments > > > It appear under "Quota Details" menu and

[google-appengine] Re: dev_appserver.py helloworld invalid arguments XP

2009-01-23 Thread niels
C:\Programme\Google\google_appengine>dev_appserver.py C:\Programme \Google\google_appengine\helloworld Invalid arguments It doesn't work. What is my mistake??? On 22 Jan., 19:00, dartdog wrote: > See:http://tombrander.wordpress.com/2008/12/28/getting-started-with- > google-app-engine-hello-worl

[google-appengine] Re: Caching using global variables

2009-01-23 Thread Blixt
That decorator is really neat! Especially the part where it ignores cache when debugging =) Thanks for the link! And thanks for your input, I'll consider doing something like that and then we'll just see how it goes once my application starts taking visitors =) - Andreas Blixt On Jan 22, 9:58 pm