Re: [google-appengine] Re: Securing access between GAE applications

2018-03-13 Thread Thijs Koerselman
16 PM Thijs Koerselman wrote: > The question was about securing HTTP access by checking traffic coming > from a webapp. The X-Appengine-Inbound-Appid header only applies to > requests from apps running *inside* the app engine environment calling > other apps in the same environment. &g

[google-appengine] Re: Securing access between GAE applications

2018-03-12 Thread Thijs Koerselman
The question was about securing HTTP access by checking traffic coming from a webapp. The X-Appengine-Inbound-Appid header only applies to requests from apps running *inside* the app engine environment calling other apps in the same environment. I was hoping to use the header too, but it can't