There is a demo at http://personashiro.appspot.com showing how to set up Mozilla's Persona <https://login.persona.org/> for identity and Apache Shiro<http://shiro.apache.org/> for authorization. There is a small demo here<https://github.com/cilogi/personashiro/tree/master/micro-demo> which shows how to set things up. The aim is to be as simple to program as the built-in user service but to provide more authorization features.
Persona isn't quite ready for prime time yet, but it looks interesting. It seems (in principle) to be more secure than using OAuth for identification, for what that's worth. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/r261TGRrZEYJ. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
