I have a different third level domain for each region my app supports
(restaurant search).

It seems like a user logged into toronto.fyood.com is not logged into
ottawa.fyood.com.

Any way I can change this?  I'm using google for authentication.

And while we're at it, can someone explain what the expected
interaction between gmail and my app should be?

I'm having a hard time finding the pattern.

If I log into gmail, I still get prompted for my password when I hit
my app. Logging out of gmail leaves me logged into my app, but logging
out of
my app logs me out of gmail?

And logging into my app means I'm logged into gmail?  Is this
expected?  This seems like a big XSS risk.

A

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to