I'm trying to enable OpenID authentication for my app. With Google as IDP it works fine. With MyOpenId.com I get the 500 Error page after I approve authentication on their site. http://app-id.appspot.com/_ah/openid_verify?...tonsofparameters...
I never knew I should take care about /_ah/openid_verify, should I? On Jun 10, 12:54 pm, Rajkumar Radhakrishnan <r.rajku...@gmail.com> wrote: > Thanks for enquiring, Ikai. > > Was held up implementing some features - including integrating OpenId > support - that I missed reading the groups' emails for a few days. > > Regarding snags.. except when I try to login with a Google Account created > using a Google Apps email-id, everything works fine. > > *Details :* > When users login using normal Google Accounts and normal Google Apps user > accounts, by providing the domain name, there are no issues. > > But, when one has a Google Apps user account with email id > u...@myappsdomain.com and had created a Google Account providing this > email-id. Then, logging in with this Google Account (instead of Google Apps > account) an Internal Server Error occurs.. > > Error: Server Error > The server encountered an error and could not complete your request. > > If the problem persists, please report your problem and mention this error > message and the query that caused it. > > The URL flow at is as given below : > > The initial URL is something > like..http://MY.DOMAIN.COM/_ah/login_redir?claimid=gmail.com&continue=http:... > > ..which gets HTTP 302 to a URL of the > form:https://www.google.com/accounts/o8/ud?source=gmail.com > &openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 > &openid.mode=checkid_setup > &openid.claimed_id=http%3A%2F%2Fspecs.openid.net > %2Fauth%2F2.0%2Fidentifier_select > &openid.identity=http%3A%2F%2Fspecs.openid.net > %2Fauth%2F2.0%2Fidentifier_select > &openid.assoc_handle=... > &openid.return_to=http%3A%2F%2FMY.DOMAIN.COM > %2F_ah%2Fopenid_verify%3Fcontinue%3Dhttp%253A%252F%252FMY.DOMAIN.COM > %252F%26gx.rp_st%3D... > &openid.realm=http%3A%2F%2FMY.DOMAIN.COM > &openid.ns.ax=http%3A%2F%2Fopenid.net%2Fsrv%2Fax%2F1.0 > &openid.ax.mode=fetch_request > &openid.ax.type.attr0=http%3A%2F%2Faxschema.org%2Fcontact%2Femail > &openid.ax.type.attr1=http%3A%2F%2Fschema.openid.net%2Fcontact%2Femail > &openid.ax.required=attr0%2Cattr1%2Cauto2 > &openid.ns.sreg=http%3A%2F%2Fopenid.net%2Fextensions%2Fsreg%2F1.1 > &openid.sreg.required=email > &openid.ns.ui=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fui%2F1.0 > &openid.ax.type.auto2=http%3A%2F%2Fwww.google.com > %2Faccounts%2Fapi%2Ffederated-login%2Fid > > ..which then gets 302 to the URL of the form > :http://MY.DOMAIN.COM/_ah/openid_verify? > continue=http%3A%2F%2FMY.DOMAIN.COM%2F > &gx.rp_st=... > &openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 > &openid.mode=id_res > &openid.op_endpoint=https%3A%2F%2Fwww.google.com > %2Faccounts%2Fo8%2Fud%3Fsource%3Dgmail.com > &openid.response_nonce=2010-06-10.. > &openid.return_to=http%3A%2F%2FMY.DOMAIN.COM > %2F_ah%2Fopenid_verify%3Fcontinue%3Dhttp%253A%252F%252FMY.DOMAIN.COM > %252F%26gx.rp_st%... > &openid.assoc_handle=... > &openid.signed=op_endpoint%2Cclaimed_id%2Cidentity%2Creturn_to%2Cresponse_n > once%2Cassoc_handle > &openid.sig=.. > &openid.identity=https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fid%3Fid%3D.. > &openid.claimed_id=https%3A%2F%2Fwww.google.com > %2Faccounts%2Fo8%2Fid%3Fid%3D.. > > There are no errors when viewed from the App Engine admin console. > > I use GAE Python (also making a CC to the python groups) and the default > API. That is, users.create_login_url(redirect_to) for Google Account login > and users.create_login_url(redirect_to, None, apps_openid_url) when Apps > domain is provided. > > From the URL flow, I see that the default domain is taken to be gmail.com, > when not providing the domain. May the issue is because of this. I guess > there will issues for users having Google Accounts with "@googlemail.com" > domain too. Is there is a better way to in which I should use the API to > avoid this issue, or should I file an issue ? > > I also remember getting the error message mentioned in this issue > :http://code.google.com/p/googleappengine/issues/detail?id=3270 > > But, not able to reproduce it now. > > Thanks & Regards, > R.Rajkumar > > On Mon, May 17, 2010 at 11:02 PM, Ikai L (Google) <ika...@google.com> wrote: > > > > > Thanks! Did you run into any snags doing it? > > > On Fri, May 14, 2010 at 4:17 AM, Rajkumar Radhakrishnan < > > r.rajku...@gmail.com> wrote: > > >> Lots of love to you folks, for OpenID !! > >> I was almost tempted to go in for temporary libraries.. until the feature > >> arrives. > > >> And the way, you made it switchable via admin console (instead of having > >> to redeploy) is good too. > > >> Thank you very much. > > >> Regards, > >> R.Rajkumar > > >> On Fri, May 14, 2010 at 6:46 AM, yjun hu <itswa...@gmail.com> wrote: > > >>> maybe google app engine shall cancel the 30seconds limit, most of > >>> backend process need more than 30seconds > > >>> On Fri, May 14, 2010 at 2:17 AM, atomi <at...@verizon.net> wrote: > > >>>> Are there API reference docs for the OpenID support? > >>>> It seems as though a new application would need to be created for this > >>>> to work - am I correct in assuming this? As of now I don't see that > >>>> option, > >>>> which makes it a little difficult to test or play with. > >>>> What is the ETA/schedule on the feature complete 1.3.4 release? > >>>> Thanks. > > >>>> On Thu, May 13, 2010 at 10:48 AM, Ikai L (Google) > >>>> <ika...@google.com>wrote: > > >>>>> ... a link to the download would be helpful: > > >>>>>http://code.google.com/p/googleappengine/downloads/list > > >>>>> On Thu, May 13, 2010 at 7:45 PM, Ikai L (Google) > >>>>> <ika...@google.com>wrote: > > >>>>>> Greetings, Java developers! > > >>>>>> Prerelease SDK 1.3.4 is ready for download. As usual, please help us > >>>>>> test this release and post feedback to this thread. > > >>>>>> The release notes are below: > > >>>>>> Version 1.3.4 > >>>>>> ============= > >>>>>> - Client side bulkloader available with the Python SDK that has a new > >>>>>> configuration syntax and wizard for easier import/export with the > >>>>>> datastore. > >>>>>> Can be used by enabling remote_api in your Java application > >>>>>> - Applications can now be configured to authenticate with OpenID by > >>>>>> selecting > >>>>>> the OpenID option when creating your application in the admin > >>>>>> console > >>>>>> http://code.google.com/p/googleappengine/issues/detail?id=248 > >>>>>> http://code.google.com/p/googleappengine/issues/detail?id=56 > >>>>>> - New API to allow App Engine apps to act as OAuth service providers > >>>>>> http://code.google.com/p/googleappengine/issues/detail?id=919 > >>>>>> - The version update check in the Java SDK now uses https > >>>>>> - Allow full access to javax.el.* > >>>>>> http://code.google.com/p/googleappengine/issues/detail?id=3157 > >>>>>> - Increased the timeout during deployment to 15 minutes > >>>>>> - Fixed an issue with JPA where an illegal cast exception was thrown > >>>>>> during the > >>>>>> fetch of integer fields > >>>>>> - MemcacheService.setNamespace() is deprecated in favor of > >>>>>> MemcacheServiceFactory.getMemcacheManager(namespace) > >>>>>> - Support in the SDK for Java 1.5 is being deprecated. These warnings > >>>>>> now appear > >>>>>> when starting the SDK > > >>>>>> -- > >>>>>> Ikai Lan > >>>>>> Developer Relations, Google App Engine > >>>>>> Twitter:http://twitter.com/ikai > >>>>>> Delicious:http://delicious.com/ikailan > > >>>>>> ---------------- > >>>>>> Google App Engine links: > >>>>>> Blog:http://googleappengine.blogspot.com > >>>>>> Twitter:http://twitter.com/app_engine > >>>>>> Reddit:http://www.reddit.com/r/appengine > > >>>>> -- > >>>>> Ikai Lan > >>>>> Developer Relations, Google App Engine > >>>>> Twitter:http://twitter.com/ikai > >>>>> Delicious:http://delicious.com/ikailan > > >>>>> ---------------- > >>>>> Google App Engine links: > >>>>> Blog:http://googleappengine.blogspot.com > >>>>> Twitter:http://twitter.com/app_engine > >>>>> Reddit:http://www.reddit.com/r/appengine > > >>>>> -- > >>>>> You received this message because you are subscribed to the Google > >>>>> Groups "Google App Engine for Java" group. > >>>>> To post to this group, send email to > >>>>> google-appengine-j...@googlegroups.com. > >>>>> To unsubscribe from this group, send email to > >>>>> google-appengine-java+unsubscr...@googlegroups.com<google-appengine-java%2B > >>>>> unsubscr...@googlegroups.com> > >>>>> . > >>>>> For more options, visit this group at > >>>>>http://groups.google.com/group/google-appengine-java?hl=en. > > >>>> -- > >>>> You received this message because you are subscribed to the Google > >>>> Groups "Google App Engine for Java" group. > >>>> To post to this group, send email to > >>>> google-appengine-j...@googlegroups.com. > >>>> To unsubscribe from this group, send email to > >>>> google-appengine-java+unsubscr...@googlegroups.com<google-appengine-java%2B > >>>> unsubscr...@googlegroups.com> > >>>> . > >>>> For more options, visit this group at > >>>>http://groups.google.com/group/google-appengine-java?hl=en. > > >>> -- > >>> hapeblog (Blog on GAE) > >>>http://www.hapeblog.com > > >>> -- > >>> You received this message because you are subscribed to the Google Groups > >>> "Google App Engine for Java" group. > >>> To post to this group, send email to > >>> google-appengine-j...@googlegroups.com. > >>> To unsubscribe from this group, send email to > >>> google-appengine-java+unsubscr...@googlegroups.com<google-appengine-java%2B > >>> unsubscr...@googlegroups.com> > >>> . > >>> For more options, visit this group at > >>>http://groups.google.com/group/google-appengine-java?hl=en. > > >> -- > >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > >>http://crm.ifreetools.com > > >> -- > >> You received this message because you are subscribed to the Google Groups > >> "Google App Engine for Java" group. > >> To post to this group, send email to > >> google-appengine-j...@googlegroups.com. > >> To unsubscribe from this group, send email to > >> google-appengine-java+unsubscr...@googlegroups.com<google-appengine-java%2B > >> unsubscr...@googlegroups.com> > >> . > >> For more options, visit this group at > >>http://groups.google.com/group/google-appengine-java?hl=en. > > > -- > > Ikai Lan > > Developer Relations, Google App Engine > > Twitter:http://twitter.com/ikai > > Delicious:http://delicious.com/ikailan > > > ---------------- > > Google App Engine links: > > Blog:http://googleappengine.blogspot.com > > Twitter:http://twitter.com/app_engine > > Reddit: > > ... > > read more » -- You received this message because you are subscribed to the Google Groups "Google App Engine for Java" group. To post to this group, send email to google-appengine-j...@googlegroups.com. To unsubscribe from this group, send email to google-appengine-java+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine-java?hl=en.
