Thanks for the reply!

I actually already considered what he suggested but had two reason's not to
do so:
1. Security - to me it feels like having a html located on a server which
hold's "trigger" commands to an extension is a risky option and might lead
to code injection vulnerabilities (of course proper coding can prevent that,
but it's still a bit of a "back-doorish" solution)
2. Writing a content scripts makes the extension more complex and isn't as
fun as finding the elegant solution

I didn't try the Chrome extension group yet because It seem's like like an
issue with GAE that can be easily fix, Do you agree with me ? I would expect
"createLoginURL" to recognize chrome-extension:// as a protocol at some
point.

Any way, thanks again for the reply
Shai


On Wed, Feb 10, 2010 at 4:39 AM, Ikai L (Google) <[email protected]> wrote:

> I actually ended up asking one of the Chrome guys for the answer to this.
> This is what he tells me:
>
> "Ah, to me it sounds like GAE's createLoginURL function doesn't recognize
> chrome-extension:// as a protocol.  It's appending the extension url like a
> relative path.
>
> You can tell him to redirect to something like "success.html" on his GAE
> app, where he can set headers to redirect back to the chrome-extension URL,
> although I think there may be a security precaution in Chrome to prevent
> doing that.  If that's the case, the developer can inject a content script
> into "success.html" that will notify his extension's background page and
> open the appropriate URL from within the extension itself."
>
> I'm sorry if this doesn't make sense, I'm not an expert on Chrome extension
> development. Have you tried their groups?
>
> On Tue, Feb 9, 2010 at 5:48 PM, Shai <[email protected]> wrote:
>
>> I would still appreciate some pointers on this issue.
>>
>> Is the redirect limited to "http://"; otherwise the API thinks I'm
>> trying to send to file in my application ? any suggestion how to
>> overcome this ?
>> Is there a way to manually create the URL ?
>>
>> Thanks
>>
>>
>> On Feb 4, 5:10 pm, Shai <[email protected]> wrote:
>> > Hi,
>> >
>> > If I try doing a redirect to a normal http site it works fine, for
>> > example
>> > UserService.createLoginURL("http://www.somewhere.com/index.html";) ;
>> >
>> > This will let me login to my Google app account and then redirect me
>> > towww.somewhere.com...
>> >
>> > But if I try to redirect to html in mychromeextension:
>> > UserService.createLoginURL("chrome-extension://[extensionid]/
>> > myhtml.html") ;
>> >
>> > It redirects me to:http://[myapp].
>> appspot.com/chrome-extension://[myextensionid]]/<http://appspot.com/chrome-extension://%5Bmyextensionid%5D%5D/>
>> > myhtml.html
>> >
>> > Can someone suggest a simple solution ?
>> > Mychromeplug-in uses Google app engine for authentication and I when
>> > the user is not logged in I would like to invoke a log-in page and
>> > give control  back to myextension
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Google App Engine for Java" group.
>> To post to this group, send email to
>> [email protected].
>> To unsubscribe from this group, send email to
>> [email protected]<google-appengine-java%[email protected]>
>> .
>> For more options, visit this group at
>> http://groups.google.com/group/google-appengine-java?hl=en.
>>
>>
>
>
> --
> Ikai Lan
> Developer Programs Engineer, Google App Engine
> http://googleappengine.blogspot.com | http://twitter.com/app_engine
>
> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine for Java" group.
> To post to this group, send email to
> [email protected].
> To unsubscribe from this group, send email to
> [email protected]<google-appengine-java%[email protected]>
> .
> For more options, visit this group at
> http://groups.google.com/group/google-appengine-java?hl=en.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine for Java" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.

Reply via email to