Not on the /remote_api URL. There are other urls with admin constraints.
Here is the definition in web.xml:
<!-- Security constraint: require admin access for the appstats url -->
<security-constraint>
<web-resource-collection>
<url-pattern>/appstats/*</url-pattern>
<url-pattern>/convert/</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>admin</role-name>
</auth-constraint>
</security-constraint>
Just /appstats/* and /convert (which is part of our app).
Oh, but wait! I have another module which likely also uses /remote_api. It
uses Python and may well ave the admin constraint. I'll finish this message
and double check and post a follow up.
-Jeff
On Monday, January 18, 2016 at 10:40:29 PM UTC-5, Adam (Cloud Platform
Support) wrote:
>
> Do you happen to have any admin security constraints set in your web.xml
> as well?
>
> On Monday, January 18, 2016 at 9:50:06 PM UTC-5, Jeffrey Schiller wrote:
>>
>>
>> I'm using the Python client side (version 1.9.31) against a Java server.
>> Here is my shell output:
>>
>> jis@jis:~$ gcloud auth list
>> Credentialed accounts:
>> - [email protected] <javascript:>
>> - [email protected] <javascript:>
>> - [email protected] <javascript:> (active)
>> - [email protected] <javascript:>
>> - [email protected] <javascript:>
>>
>> To set the active account, run:
>> $ gcloud config set account ``ACCOUNT''
>>
>> jis@jis:~$ python -i /u1/SDK/google_appengine/remote_api_shell.py -p
>> /remote_api jisqyvap4
>> Traceback (most recent call last):
>> File "/u1/SDK/google_appengine/remote_api_shell.py", line 133, in
>> <module>
>> run_file(__file__, globals())
>> File "/u1/SDK/google_appengine/remote_api_shell.py", line 129, in
>> run_file
>> execfile(_PATHS.script_file(script_name), globals_)
>> File
>> "/u1/SDK/google_appengine/google/appengine/tools/remote_api_shell.py", line
>> 160, in <module>
>> main(sys.argv)
>> File
>> "/u1/SDK/google_appengine/google/appengine/tools/remote_api_shell.py", line
>> 156, in main
>> oauth2=True)
>> File
>> "/u1/SDK/google_appengine/google/appengine/tools/remote_api_shell.py", line
>> 74, in remote_api_shell
>> secure=secure)
>> File
>> "/u1/SDK/google_appengine/google/appengine/ext/remote_api/remote_api_stub.py",
>>
>> line 768, in ConfigureRemoteApiForOAuth
>> rpc_server_factory=rpc_server_factory)
>> File
>> "/u1/SDK/google_appengine/google/appengine/ext/remote_api/remote_api_stub.py",
>>
>> line 835, in ConfigureRemoteApi
>> app_id = GetRemoteAppIdFromServer(server, path, rtok)
>> File
>> "/u1/SDK/google_appengine/google/appengine/ext/remote_api/remote_api_stub.py",
>>
>> line 569, in GetRemoteAppIdFromServer
>> response = server.Send(path, payload=None, **urlargs)
>> File
>> "/u1/SDK/google_appengine/google/appengine/tools/appengine_rpc_httplib2.py",
>> line 291, in Send
>> NeedAuth()
>> File
>> "/u1/SDK/google_appengine/google/appengine/tools/appengine_rpc_httplib2.py",
>> line 236, in NeedAuth
>> RaiseHttpError(url, response_info, response, 'Too many auth
>> attempts.')
>> File
>> "/u1/SDK/google_appengine/google/appengine/tools/appengine_rpc_httplib2.py",
>> line 85, in RaiseHttpError
>> raise urllib2.HTTPError(url, response_info.status, msg,
>> response_info, stream)
>> urllib2.HTTPError: HTTP Error 302: Found Too many auth attempts.
>> >>>
>>
>> And here is how the Remote API is configured on the server (Java) side:
>>
>> <!-- Remote API -->
>> <servlet>
>> <display-name>Remote API Servlet</display-name>
>> <servlet-name>RemoteApiServlet</servlet-name>
>>
>> <servlet-class>com.google.apphosting.utils.remoteapi.RemoteApiServlet</servlet-class>
>> <load-on-startup>1</load-on-startup>
>> </servlet>
>> <servlet-mapping>
>> <servlet-name>RemoteApiServlet</servlet-name>
>> <url-pattern>/remote_api</url-pattern>
>> </servlet-mapping>
>>
>> (this is straight out of the documentation).
>>
>> -Jeff
>>
>
--
You received this message because you are subscribed to the Google Groups
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit
https://groups.google.com/d/msgid/google-appengine/a9b5065c-838b-4b86-af53-86e8265513cb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
