Re: [appengine-java] Citical Security error in Accounts Java API: request.getUserPrincipal() gets wrong username/email

2010-02-25 Thread Thomas Schnocklake
Yes, i implemented this already. I developped the widget in GAE in Java. There I used OAuth to authenticate against the gdata-api. Then I stored the combination of usern...@gappdomain.xxx and the OAuth accesskey in the GAE persistant storage. Everything works fine. So when i log in google apps the

Re: [appengine-java] Citical Security error in Accounts Java API: request.getUserPrincipal() gets wrong username/email

2010-02-24 Thread Ikai L (Google)
Probably OAuth, though I'm not sure how that will work with a gadget. In most places gadgets will include a user ID with the makeRequest. On Tue, Feb 23, 2010 at 12:23 PM, Thomas Schnocklake thomas.schnockl...@googlemail.com wrote: Thank you for your answer. So what would you suppose to use

Re: [appengine-java] Citical Security error in Accounts Java API: request.getUserPrincipal() gets wrong username/email

2010-02-23 Thread Thomas Schnocklake
Thank you for your answer. So what would you suppose to use for authentication for a gadget that is places in google apps (e.g. gmail, google sites ) ? thanks thomas 2010/2/18 Ikai L (Google) ika...@google.com Yes, this seems to make sense. Being logged into Google Apps is independent of

[appengine-java] Citical Security error in Accounts Java API: request.getUserPrincipal() gets wrong username/email

2010-02-16 Thread tsschnoc
Hello, I use App Engine in my Google Apps domain and restricted the authentification of app engine to my apps domain. (see http://code.google.com/appengine/articles/auth.html ) I developed a widget and use this in multiple accounts of my google apps domain. When i switch from one account (of my