Thanks for the reply! I actually already considered what he suggested but had two reason's not to do so: 1. Security - to me it feels like having a html located on a server which hold's "trigger" commands to an extension is a risky option and might lead to code injection vulnerabilities (of course proper coding can prevent that, but it's still a bit of a "back-doorish" solution) 2. Writing a content scripts makes the extension more complex and isn't as fun as finding the elegant solution
I didn't try the Chrome extension group yet because It seem's like like an issue with GAE that can be easily fix, Do you agree with me ? I would expect "createLoginURL" to recognize chrome-extension:// as a protocol at some point. Any way, thanks again for the reply Shai On Wed, Feb 10, 2010 at 4:39 AM, Ikai L (Google) <[email protected]> wrote: > I actually ended up asking one of the Chrome guys for the answer to this. > This is what he tells me: > > "Ah, to me it sounds like GAE's createLoginURL function doesn't recognize > chrome-extension:// as a protocol. It's appending the extension url like a > relative path. > > You can tell him to redirect to something like "success.html" on his GAE > app, where he can set headers to redirect back to the chrome-extension URL, > although I think there may be a security precaution in Chrome to prevent > doing that. If that's the case, the developer can inject a content script > into "success.html" that will notify his extension's background page and > open the appropriate URL from within the extension itself." > > I'm sorry if this doesn't make sense, I'm not an expert on Chrome extension > development. Have you tried their groups? > > On Tue, Feb 9, 2010 at 5:48 PM, Shai <[email protected]> wrote: > >> I would still appreciate some pointers on this issue. >> >> Is the redirect limited to "http://" otherwise the API thinks I'm >> trying to send to file in my application ? any suggestion how to >> overcome this ? >> Is there a way to manually create the URL ? >> >> Thanks >> >> >> On Feb 4, 5:10 pm, Shai <[email protected]> wrote: >> > Hi, >> > >> > If I try doing a redirect to a normal http site it works fine, for >> > example >> > UserService.createLoginURL("http://www.somewhere.com/index.html") ; >> > >> > This will let me login to my Google app account and then redirect me >> > towww.somewhere.com... >> > >> > But if I try to redirect to html in mychromeextension: >> > UserService.createLoginURL("chrome-extension://[extensionid]/ >> > myhtml.html") ; >> > >> > It redirects me to:http://[myapp]. >> appspot.com/chrome-extension://[myextensionid]]/<http://appspot.com/chrome-extension://%5Bmyextensionid%5D%5D/> >> > myhtml.html >> > >> > Can someone suggest a simple solution ? >> > Mychromeplug-in uses Google app engine for authentication and I when >> > the user is not logged in I would like to invoke a log-in page and >> > give control back to myextension >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Google App Engine for Java" group. >> To post to this group, send email to >> [email protected]. >> To unsubscribe from this group, send email to >> [email protected]<google-appengine-java%[email protected]> >> . >> For more options, visit this group at >> http://groups.google.com/group/google-appengine-java?hl=en. >> >> > > > -- > Ikai Lan > Developer Programs Engineer, Google App Engine > http://googleappengine.blogspot.com | http://twitter.com/app_engine > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine for Java" group. > To post to this group, send email to > [email protected]. > To unsubscribe from this group, send email to > [email protected]<google-appengine-java%[email protected]> > . > For more options, visit this group at > http://groups.google.com/group/google-appengine-java?hl=en. > -- You received this message because you are subscribed to the Google Groups "Google App Engine for Java" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine-java?hl=en.
