If you want to use Client Login you need to keep secure connections.

If you are working with Google Apps, please try first 2-legged OAuth:
http://code.google.com/apis/accounts/docs/OAuth.html#GoogleAppsOAuth

Cheers,
Julian

On Jan 17, 8:13 am, "Rambo Mogambo" <[email protected]> wrote:
> It’s a matter of customer experience for my client. They cannot have people
> leave their site. Is it ok to use the Client Login from the web app?
>
> Thanks
> - Rambo Mogambo
>
> -----Original Message-----
> From: [email protected]
> [mailto:[email protected]] On Behalf Of Julian (Google)
> Sent: Monday, January 12, 2009 10:13 AM
> To: Google Contacts API
> Subject: [Contacts API] Re: Reg. authentication
>
> Hi,
>
> As you said, Client Login works with a username and password. But, It
> is strongly recommended to use AuthSub or OAuth to have a higher level
> of security, by using one of these the users authenticates with a
> secure Google server, and your application works without ever handling
> users' account login information.
>
> Is there a special reason for not allowing redirections?
>
> Cheers,
> Julian.
>
> On Jan 8, 9:12 pm, Rambo <[email protected]> wrote:
> > Hello,
>
> > I have a web app. ; Visitors to the site are given a form to fill
> > their gmail id and password and the intent is to show their contacts.
> > I dont want to take the user to any page outside my site - as I read
> > theAuthenticationit looks like I have to taken them to a google page
> > for auth., and then uponauthenticationthey are to be redirected.
>
> > I dont want to do this ... whyc cant I use the same logic that applies
> > with theAuthenticationfor Installed Applications: ClientLogin that
> > is (http://code.google.com/apis/gdata/auth.html#ClientLogin)
>
> > I have tried to use ClientLogin approch on the web app. and it seems
> > to work just fine! So - why is google saying not use this for web app.
> > Can anyone suggest a solution for my need?
>
> > Thanks
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Contacts API" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/google-contacts-api?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to