Does Flexible Environment offer server-side-session? A quick PoC suggests that it does not.
This discussion <https://groups.google.com/forum/#!msg/google-appengine/PmvpZyL7Cbw/axhC4FXaBQAJ> talks about sessions for Standard Env. Documentation for configuring Standard Env <https://cloud.google.com/appengine/docs/standard/java/config/appref> says "Session data is always written synchronously to memcache". App Engine memcache does not work with Flexible Environment, so that may give some background. Documentation for configuring Flex Env <https://cloud.google.com/appengine/docs/flexible/nodejs/configuring-your-app-with-app-yaml> says nothing about sessions. Sessions are a basic feature of webapps and supported by standard appservers. Even with client-side sessions like JWT, the server-side session store provides essential security features. Does Flex Env provide out-of-the-box support for a server-side session store? On Mon, Nov 6, 2017 at 3:00 AM, 'Les Vogel' via Google App Engine < [email protected]> wrote: > Yes. It separate from the Users API. > > On Thu, Nov 2, 2017 at 1:09 AM, Joshua Fox <[email protected]> wrote: > >> Les, thank you, >> >> I see that it >> >> > stores session data in the App Engine datastore for persistence, and >> also uses memcache for speed >> <https://cloud.google.com/appengine/docs/standard/java/config/appref?hl=fr#sessions_enabled> >> >> is this accessible, as would normally be true with Java appservers, >> through req.getSession().setAttribute(...) *even when unauthenticated*? >> In other words, one can use this even without using the Google App Engine >> Users API (if we are implementing our own user management). >> >> On Thu, Nov 2, 2017 at 3:52 AM, 'Les Vogel' via Google App Engine < >> [email protected]> wrote: >> >>> Hi Joshua, >>> >>> For App Engine Standard: >>> >>> Take a look at the appengine-web.xml reference >>> <https://cloud.google.com/appengine/docs/standard/java/config/appref#syntax>. >>> Specifically *async-session-persistence*, *sessions-enabled*, >>> >>> I'm out for 3 weeks this month, but hope to review and fix all the Java >>> Bookshelfs in early December. If there are other areas that you think they >>> don't meet expectations, please let me know. >>> >>> Regards, >>> >>> Les >>> >>> On Tue, Oct 31, 2017 at 7:16 AM, 'Yannick (Cloud Platform Support)' via >>> Google App Engine <[email protected]> wrote: >>> >>>> The exact technical details of session support are not publicly >>>> documented, but the appengine-web.xml Reference >>>> <https://cloud.google.com/appengine/docs/standard/java/config/appref?hl=fr#sessions_enabled> >>>> you >>>> pointed to before does say it stores the data on the Datastore with >>>> Memcache acting as a speed boost. That is to say it stores it in the same >>>> way you should be storing session data if you were to handle it yourself. >>>> >>>> And no, at this time this system only supports valid Google accounts, >>>> which are gmail.com accounts or a GSuite domain's accounts. >>>> >>>> >>>> On Tuesday, October 31, 2017 at 6:34:21 AM UTC-4, Joshua Fox wrote: >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>> >>>>>> Note that session support is something that is done per-runtime and >>>>>> per-framework, >>>>>> >>>>> >>>>> I am asking specifically about Google Application Engine Standard >>>>> Environment Java 7; and for Java 8. >>>>> >>>>> but most if not all of them include it as it is indeed a basic feature >>>>>> of a web server. Part of the Bookshelf tutorial deals with using >>>>>> sessions >>>>>> <https://cloud.google.com/java/getting-started-appengine-standard/authenticate-users> >>>>>> . >>>>>> >>>>> >>>>> Thank you. I see that that indeed supports req.getSession(). >>>>> setAttribute(...) >>>>> >>>>> How is this data stored so that it is accessible to all Instances? In >>>>> the Memcache? >>>>> >>>>> Apparently this uses the Users API >>>>> <https://cloud.google.com/appengine/docs/standard/java/users/?hl=en>, >>>>> which works with Google or OAuth authentication. Does GAE Standard Env use >>>>> a Session Store, accessible for all Instances, which is usable with >>>>> user-authentication in general? According to this StackOverflow answer >>>>> <https://stackoverflow.com/questions/18860186/>, it does not. >>>>> >>>>>> >>>>>> >>>>>> On Monday, October 30, 2017 at 3:30:28 AM UTC-4, Joshua Fox wrote: >>>>>>> >>>>>>> What is the recommended way to do Session Management on Google >>>>>>> Application Engine? >>>>>>> >>>>>>> In the webapp world, the usual implementation with a session store >>>>>>> (Redis/Memcache/RDBMS etc) that is shared by all server-instances. >>>>>>> >>>>>>> So, when the Java code calls >>>>>>> >>>>>>> request.getSession().setAttribute("UserName", username); >>>>>>> >>>>>>> that value will be accessible for multiple >>>>>>> requests by this browser. >>>>>>> >>>>>>> A websearch shows some advice: >>>>>>> >>>>>>> - Implement it yourself >>>>>>> - Various open-source libraries, non-standard and mostly >>>>>>> unmaintained >>>>>>> >>>>>>> I would expect a PaaS like GAE to have Session Management >>>>>>> out-of-the-box. >>>>>>> >>>>>>> This StackOverflow answer >>>>>>> <https://stackoverflow.com/questions/28689941/how-to-deal-with-sessions-in-google-app-engine> >>>>>>> says "AppEngine >>>>>>> uses Datastore to store the session informations and memcache for faster >>>>>>> access" and this official documentation >>>>>>> <https://cloud.google.com/appengine/docs/standard/java/config/appref> >>>>>>> mentions that >>>>>>> "Session data is always written synchronously to memcache." >>>>>>> >>>>>>> But on the other hand this tutorial >>>>>>> <https://cloud.google.com/community/tutorials/express-memcached-session-appengine> >>>>>>> suggests >>>>>>> that session management must be added to GAE. >>>>>>> >>>>>>> How should we do Session Management? >>>>>>> >>>>>>> >>>>>>> -- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "Google App Engine" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>> send an email to [email protected]. >>>>>> To post to this group, send email to google-appengine@googlegroups. >>>>>> com. >>>>>> Visit this group at https://groups.google.com/group/google-appengine. >>>>>> To view this discussion on the web visit >>>>>> https://groups.google.com/d/msgid/google-appengine/764e06ad- >>>>>> 4d90-45bd-8bcd-e801913976a0%40googlegroups.com >>>>>> <https://groups.google.com/d/msgid/google-appengine/764e06ad-4d90-45bd-8bcd-e801913976a0%40googlegroups.com?utm_medium=email&utm_source=footer> >>>>>> . >>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> >>>>> *JOSHUA FOX* >>>>> Principal Software Architect | Freightos >>>>> >>>>> >>>>> >>>>> *T (Israel): *+972-545691165 <+972%2054-569-1165> | *T (US)*: + >>>>> 1-3123400953 <(312)%20340-0953> >>>>> Smooth shipping. >>>>> >>>>> >>>>> >>>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "Google App Engine" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To post to this group, send email to [email protected]. >>>> Visit this group at https://groups.google.com/group/google-appengine. >>>> To view this discussion on the web visit https://groups.google.com/d/ms >>>> gid/google-appengine/87537ad8-948e-46cc-8e6d-4945e10604ad%40 >>>> googlegroups.com >>>> <https://groups.google.com/d/msgid/google-appengine/87537ad8-948e-46cc-8e6d-4945e10604ad%40googlegroups.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>>> For more options, visit https://groups.google.com/d/optout. >>>> >>> >>> >>> >>> -- >>> >>> >>> * • **Les Vogel* >>> * • *Cloud Developer Relations >>> * • *[email protected] >>> * • *+1-4 <%2B1-650-338-7103>08-676-7023 >>> >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Google App Engine" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To post to this group, send email to [email protected]. >>> Visit this group at https://groups.google.com/group/google-appengine. >>> To view this discussion on the web visit https://groups.google.com/d/ms >>> gid/google-appengine/CAGB1p5gW0J1u79M4M3KNk91eTz-gNJK%3DigK5 >>> GC_vHXe52HNqPQ%40mail.gmail.com >>> <https://groups.google.com/d/msgid/google-appengine/CAGB1p5gW0J1u79M4M3KNk91eTz-gNJK%3DigK5GC_vHXe52HNqPQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >>> . >>> >>> For more options, visit https://groups.google.com/d/optout. >>> >> >> >> >> -- >> >> >> *JOSHUA FOX* >> Principal Software Architect | Freightos >> >> >> >> *T (Israel): *+972-545691165 <+972%2054-569-1165> | *T (US)*: + >> 1-3123400953 <(312)%20340-0953> >> Smooth shipping. >> >> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Google App Engine" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to [email protected]. >> Visit this group at https://groups.google.com/group/google-appengine. >> To view this discussion on the web visit https://groups.google.com/d/ms >> gid/google-appengine/CAD%3DB7cOv8KXigkVJhEYmRp-3DW0R1kU%3DyC >> pLqZ25iVALOfxgdA%40mail.gmail.com >> <https://groups.google.com/d/msgid/google-appengine/CAD%3DB7cOv8KXigkVJhEYmRp-3DW0R1kU%3DyCpLqZ25iVALOfxgdA%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> >> For more options, visit https://groups.google.com/d/optout. >> > > > > -- > > > * • **Les Vogel* > * • *Cloud Developer Relations > * • *[email protected] > * • *+1-4 <%2B1-650-338-7103>08-676-7023 > > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/group/google-appengine. > To view this discussion on the web visit https://groups.google.com/d/ms > gid/google-appengine/CAGB1p5g%3DdLYDeME%2BTBV8fTBxe- > JQiu2ceoVXAVUM8A-%2BhBTiSg%40mail.gmail.com > <https://groups.google.com/d/msgid/google-appengine/CAGB1p5g%3DdLYDeME%2BTBV8fTBxe-JQiu2ceoVXAVUM8A-%2BhBTiSg%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- *JOSHUA FOX* Director, Software Architecture | Freightos *T (Israel): *+972-545691165 | *T (US)*: +1-3123400953 Smooth shipping. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/CAD%3DB7cOJv1-_Wgx_S4DaWkhSW2Z2qYWZTmQ2cEWXM-_Mo%3Dn%3DxA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
