Hi,

you use the yaml configuration to force ssl, such as:

handlers:
- url: /youraccount/.*
  script: accounts.py
  login: required
  secure: always


see 
https://developers.google.com/appengine/docs/python/config/appconfig#Python_app_yaml_Secure_URLs

Cheers!

pd

Am Donnerstag, 7. Februar 2013 08:24:43 UTC+1 schrieb Philip Kilner:
>
> Hi, 
>
> On 06/02/13 20:45, howesc wrote: 
> > if you want all requests in SSL it sounds like the best thing to me. 
> > 
>
> Yes, it's working very well from my PoV - but my needs are very simple 
> in that I want to force SSL for everything. I'm used to doing this in 
> Apache, so haven't previously had to think about it enforcing it within 
> the app. 
>
> There was a browser-specific issue where e.g. Firefox worked 
> immediately, but Chrome blocked the jQuery scripts from Google's CDN on 
> the basis that they were insecure. Changing the link to the scripts to 
> https sorted that. 
>
> > note that on GAE if you want to use SSL and a custom domain you have to 
> > purchase additional add-ons to the GAE service.  https on the 
> > appspot.com domain is free. 
> > 
>
> Understood - I'm happy withe the appspot.com URL, FWIW. 
>
>
> -- 
>
> Regards, 
>
> PhilK 
>
>
> 'a bell is a cup...until it is struck' 
>
>

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to web2py+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to