Just reflecting back on it, I'm not sure why it always worked in the hosted mode. Probably it doesn't read the files from the cache in the hosted mode, and that misled me into thinking that something was wrong with GAE. Well anyway ...
On May 4, 1:52 am, DFB <[email protected]> wrote: > Hi Robert, > > I think the problem was the cache and my understanding of how browser > 'stealth' modes work. I thought if I open up a fresh 'stealth' mode > window in a browser such as Chrome, it would not read anything from > the cache. But apparently, it doesn't work that way. It still reads > the file from the cache. However, it doesn't get the login information > from the cookie. So, while I'm not logged, I could still see the file. > It works fine. When I said I used it on different browsers and > different machines, I was using the same mechanism (stealth mode) in > Chrome and Firefox on different machines and the file must have been > cached in all cases. > > Thanks for your help. > > On May 3, 11:09 pm, Robert Kluin <[email protected]> wrote: > > > > > > > > > Hi, > > Maybe you've already logged in before. Have you tried clearing your > > cookies or using a different browser? > > > Robert > > > On Tue, May 3, 2011 at 01:21, DFB <[email protected]> wrote: > > > My GWT application is using Google Accounts authentication. I've added > > > this simplesecurityconstraintto my web.xml file: > > > > <security-constraint> > > > <web-resource-collection> > > > <url-pattern>ds/*</url-pattern> > > > </web-resource-collection> > > > <auth-constraint> > > > <role-name>*</role-name> > > > </auth-constraint> > > > </security-constraint> > > > > In the hosted mode, if I type the full path to a file inside the 'ds' > > > folder (example http://<>/ds/abc.xml), it redirects me to the login > > > page. After login, I can access the file. However, it doesn't work > > > when the app is deployed to GAE. Any user can access the file from the > > > URLhttp://myappid.appspot.com/ds/abc.xmlwithoutlogging in. I was > > > expecting the app to redirect me to the Google accounts login page > > > when I tried to access the file. > > > > Am I missing something? > > > > Thanks in advance. > > > > -- > > > You received this message because you are subscribed to the Google Groups > > > "Google App Engine" group. > > > To post to this group, send email to [email protected]. > > > To unsubscribe from this group, send email to > > > [email protected]. > > > For more options, visit this group > > > athttp://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
