Hi, The cookie used for login info on the dev server is just a session cookie; the production cookie is not. That is why you're seeing the production logins last a lot longer.
Robert On Tue, May 3, 2011 at 13:55, DFB <[email protected]> wrote: > Just reflecting back on it, I'm not sure why it always worked in the > hosted mode. Probably it doesn't read the files from the cache in the > hosted mode, and that misled me into thinking that something was wrong > with GAE. Well anyway ... > > On May 4, 1:52 am, DFB <[email protected]> wrote: >> Hi Robert, >> >> I think the problem was the cache and my understanding of how browser >> 'stealth' modes work. I thought if I open up a fresh 'stealth' mode >> window in a browser such as Chrome, it would not read anything from >> the cache. But apparently, it doesn't work that way. It still reads >> the file from the cache. However, it doesn't get the login information >> from the cookie. So, while I'm not logged, I could still see the file. >> It works fine. When I said I used it on different browsers and >> different machines, I was using the same mechanism (stealth mode) in >> Chrome and Firefox on different machines and the file must have been >> cached in all cases. >> >> Thanks for your help. >> >> On May 3, 11:09 pm, Robert Kluin <[email protected]> wrote: >> >> >> >> >> >> >> >> > Hi, >> > Maybe you've already logged in before. Have you tried clearing your >> > cookies or using a different browser? >> >> > Robert >> >> > On Tue, May 3, 2011 at 01:21, DFB <[email protected]> wrote: >> > > My GWT application is using Google Accounts authentication. I've added >> > > this simplesecurityconstraintto my web.xml file: >> >> > > <security-constraint> >> > > <web-resource-collection> >> > > <url-pattern>ds/*</url-pattern> >> > > </web-resource-collection> >> > > <auth-constraint> >> > > <role-name>*</role-name> >> > > </auth-constraint> >> > > </security-constraint> >> >> > > In the hosted mode, if I type the full path to a file inside the 'ds' >> > > folder (example http://<>/ds/abc.xml), it redirects me to the login >> > > page. After login, I can access the file. However, it doesn't work >> > > when the app is deployed to GAE. Any user can access the file from the >> > > URLhttp://myappid.appspot.com/ds/abc.xmlwithoutlogging in. I was >> > > expecting the app to redirect me to the Google accounts login page >> > > when I tried to access the file. >> >> > > Am I missing something? >> >> > > Thanks in advance. >> >> > > -- >> > > You received this message because you are subscribed to the Google >> > > Groups "Google App Engine" group. >> > > To post to this group, send email to [email protected]. >> > > To unsubscribe from this group, send email to >> > > [email protected]. >> > > For more options, visit this group >> > > athttp://groups.google.com/group/google-appengine?hl=en. > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
