My GAE app only allows Google Account and Google Apps users. To login Google Apps users I provide a login page with a text box field asking them their email. In server side I simply extract the domain portion of the email and create login url using
users.create_login_url(federated_identity='google.com/accounts/o8/site- xrds?hd=yourappsdomain.com') How can I find whether the extracted domain is actually a Google Apps domain? what if someone simply provides say yahoo.com? I would like to give the user a warning stating that the domain is not present on google apps and he should contact system admin. On Oct 10, 6:57 am, Robert Kluin <[email protected]> wrote: > Hi David, > I am not familiar with the android marketplace, sorry. > > I currently use two techniques. First, on my generalloginpage > users can selectGoogleAppsthen enter the domain in a text box. > Second, likegoogleservices, users can go to a /theirdomain.com > enpoint and I fill in the domain and send them to the rightloginpage > -- also pretty easy. > > Robert > > > > > > > > On Thu, Oct 7, 2010 at 03:34, David <[email protected]> wrote: > > Wow, that federatedloginstuff is really complicated. One thing in > > your example assumes I know what yourappsdomain.com would be. I don't > > want to restrict thegoogleappsaccountto mygoogleappslogins, I > > just want allgoogleappslogins to work. I basically have an Android > > app that integrates in with my app engine server. The Android Market > > lets the user put in anyGoogleaccountorGoogleAppsaccount. I > > just want that sameaccountto work on my app engine server. Google > > accounts work, butGoogleAppsaccounts do not. I am able to get the > > Auth token and authenticate the user via token with thegoogleapps > >account, it just appears that the ACSID cookie I send to the appengine > > server denies access. Now with federatedlogin, is there a way to > > authenticate using an auth token? > > > On Oct 5, 12:02 pm, Robert Kluin <[email protected]> wrote: > >> Yes, you will need to use the federatedlogin(OpenID) stuff. > > >> The long-and-short of it is that you pass the federated_identity > >> parameter to users.create_login_url. You'll need to setup a page for > >> users to tell you what goes in federated_identity somehow, perhaps by > >> clicking agooglelogo or entering anappsdomain. > > >> ForGoogleaccounts: > >> users.create_login_url(federated_identity='google.com/accounts/o8/id') > >> or > >> users.create_login_url(federated_identity='gmail.com') > > >> For anAppsaccount: > >> > >> users.create_login_url(federated_identity='google.com/accounts/o8/site-xrds > >> ?hd=yourappsdomain.com') > > >> There is a little info here: > >> http://code.google.com/appengine/docs/python/users/overview.html > > >> And Wesley has a nice article about it here: > >> http://code.google.com/appengine/articles/openid.html > > >> Some info onGoogleAppsdomains and OpenID: > >> http://groups.google.com/group/google-federated-login-api/web/openid-... > > >> Robert > > >> On Tue, Oct 5, 2010 at 11:21, David <[email protected]> wrote: > >> > I'm having an issue with users not being able to authenticate with GAE > >> > using aGoogleAppsaccount. RegularGoogleaccountusers can access > >> > it fine. How do I make it so it supportsGoogleAppslogins in > >> > addition? Do I need to use the FederatedLoginstuff in GAE? It is > >> > currently not set to Federated because that makes it so neitherGoogle > >> >AppsnorGoogleaccounts work. Can anyone help me out? > > >> > Thanks, > >> > David > > >> > -- > >> > You received this message because you are subscribed to theGoogleGroups > >> > "GoogleApp Engine" group. > >> > To post to this group, send email [email protected]. > >> > To unsubscribe from this group, send email > >> > [email protected]. > >> > For more options, visit this group > >> > athttp://groups.google.com/group/google-appengine?hl=en. > > > -- > > You received this message because you are subscribed to theGoogleGroups > > "GoogleApp Engine" group. > > To post to this group, send email [email protected]. > > To unsubscribe from this group, send email > > [email protected]. > > For more options, visit this group > > athttp://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
