Ok Google, authentication is broken for users that are logged into multiple Google Accounts in their browser when accessing App Engine apps that are using the Users API.
This seems like a fairly important issue. On Mon, May 22, 2017 at 4:57 PM, Geoffrey Arnold <[email protected]> wrote: > Definitely an issue. I opened a ticket here: > > https://issuetracker.google.com/issues/38506275 > > > On Thu, May 18, 2017 at 11:47 AM, Geoffrey Arnold < > [email protected]> wrote: > >> Hello, >> >> We're still trying to nail it down, but we're seeing weird new behavior >> when using `login: admin` in app.yaml to secure a route when a user is >> logged into multiple Google Accounts in their browser. Note that we *are >> not* using the IAP. >> >> Previously, when a user was logged into multiple Google Accounts in their >> browser, GAE would prompt the user to choose the account when accessing a >> route secured with `login: admin`. >> >> Now, it appears that GAE is automatically using the first Google Account >> the user is logged into. >> >> I've attempted to clear cookies/local storage for the site but no luck. I >> can't get GAE to prompt me to choose the account. I have only tested this >> in Chrome on OSX. >> >> Any help would be greatly appreciated. >> >> Geoff. >> > > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/CAF388612-2krX4TdU-ZmgHBbNZH7-PBG7SkeV6YXv0tUYODNtQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
