A couple questions on tokens:

1) I am reading the documentation on using AuthSub for web
applications. I am concerned and confused by this statement:

"Google Accounts is not set up to manage large numbers of tokens, and
in fact will not issue more than ten valid tokens for any one user to
a web application."

What exactly does this mean? By "user", are you referring to me (the
developer of the app), or to the users who will be using my app?

I plan to store only 1 session token per app user (for access to
spreadsheets), but could potentially have many more than 10 users
accessing my app at the same time. If the limit is 10 valid tokens per
app user (at a time), then this is not a problem since I will have
just 1 token per user. But if it's 10 tokens per app overall at a
time, then this will limit me. I'm pretty sure it's the former, but
wanted to be sure.

2) Is it considered good practice to store user session tokens in the
Google data store (associated with a user's id)?

Thanks so much,
Dave
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appengine@googlegroups.com
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to