For item 1, my usual response is to have a look at Spring Security (aka Acegi). It's probably the most flexible.
For item 2, my memory of how Authorize.net's credit card service works (which is similar to CyberSource's Hosted Order Page) is that at the point (page) where the customer enters their credit card information, they are flipped over to the Authorize.net server. The Authorize.net server then sends (POSTs) to your web application some encrypted stuff telling you if the credit card transaction was approved, and the customer is flipped back to your server. (Flipped == redirected.) The whole point of doing it that way is so that your system never touches or sees the credit card information; the credit card industry's compliance rules (aka PCI) are unbelievably onerous if your system sees the credit card number in any way, even if it never stores it anywhere. It's not too difficult to get set up and I found the Authorize.net documentation decent (much better than CyberSource's, but this was a year or so ago). _yoko_ wrote: > Hey Guys, > I have some basic questions. I just started using Java-GAE and am > trying to figure out if my site can be ported to GAE. > > > How can I do the following(I have a custom domain say abc.com and an > appspot domain say abcd.appspot.com): > 1. Implement an SSL based login page. My site required data like > users SSN number, so it can not be unencrypted and the Google Login or > any other Open ID login would not suffice. > > 2. Custom integrate with Authorize.NET. I do not want the user to > leave my site when entering their Credit Card Details etc. > > > Any insight into these two issues would really be helpful. > > > Regards, > > > Yoko > > -- > > You received this message because you are subscribed to the Google Groups > "Google App Engine for Java" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-appengine-java?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Google App Engine for Java" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine-java?hl=en.
