Google App Engine allows using Google Authentication and restricting it to a specific Google Organisation domain by setting to 'Google Apps Domain' in the control panel like so:
Settings
I am wondering if there is any way of having multiple domains here? Tried comma separated but not working.
Thanks
Nope, that only works for a single domain. You'll need to use a more general OAuth2 implementation (e.g., Authomatic) and check the email address of people who login to make sure it matches an allowed domain.
Related
I'm new to web dev, and trying to build an application using google app engine's java standard environment, which will require user authentication. I'd like to provide authentication which requires only a username and password of the user, as opposed to a phone number or social account.
As I look through the options listed in app engine's auth tutorial, if I'm understanding them correctly, none of them allow login without a phone number or social account? https://cloud.google.com/appengine/docs/standard/java/oauth/
If so, are there alternatives available while still using app engine? I've read some about 'web container managed authentication' but I'm not sure if its something app engine will support, or if its a full solution.
Is it possible/feasible to roll fully custom authentication in the app engine standard environment? As I search for custom authentication tutorials I see a lot of articles recommending against this, but it's not clear to me what the alternative is.
Thanks for any information
As it's mention on the OpenID Connect documents of Google Cloud, it's important for you and your users security to authenticate using well proven and debugged code. Google offers Firebase Authentication which let's users log in with an Email and password.
If you still want to implement the authorize part on your own, you can use your preferred web framework and probably it will have an authorizing process.
For example, in python you can use Django authorize system to provide users for a custom way to log in.
But, as I said before, I highly recommend you to use the Google APIs for authorizing as they are OpenID certificated.
I have added two custom domains to Google Developers Console for a Google App Project. One, a naked domain with A and AAA records set on the third party DNS manager as specified by Google. Two, a www domain with a Cname record set on the third party DNS manager, as specified by Google.
The www is serving, but the naked domain is not! The A records ip addresses timeout on my local machine but I get results when using http://tools.pingdom.com/ping/
Obviously you can use more than one custom domain but is there something I'm missing here?
Update: custom naked domain mapping is now supported directly in GAE, see How to use Google app engine with my own naked domain (not subdomain)?.
[Old answer follows]
If it's acceptable for you to use custom domains through Google Apps then you can use the Google Admin console to:
map your naked domain to Google Apps
redirect the naked domain to a certain (sub)domain of your choice
I find several advantages of going this way:
you can change the naked domain redirect without any change in the
GAE apps domain configs
the direct domain mapping of GAE apps (without using Google Apps) is
still very young, documentation is far from exhaustive
you can use SSL with your custom domains, according to the docs:
"To add Secure Sockets Layer (SSL) encryption (i.e., an HTTPS
address) to your App Engine app, you must use the SSL service
provided with Google Apps".
I am writing a little app for Google App Engine. I would like to point a domain I already own to my Google App Engine application. This domain has been in my possession for years and is currently unused and parked at another host.
When I go to add my domain from my admin console, it sends me to the Google Apps signup page. It looks like Google Apps is for gmail accounts, google drive space, etc, and I already have all these items. I am not sure why it's trying to force me to signup for this account when I am trying to point a domain to my Google App Engine application.
What am I doing wrong? Do I actually need a Google Apps account to point a domain to my GAE application?
I feel like I'm doing something wrong or missing something very obvious, but I have no idea what it could be.
You should sign up for Google Apps, but you do not have to use Gmail, etc., with this domain name if you don't want to. Google is trying to move all of its services to a single platform, which makes integration easier (e.g. authentication, user management, etc.)
Its in the docs. Yes in there it says the domain needs to be a google apps domain.
I need to create a google group using my google app engine application. Please guide me where should i look for info regarding this. Where should i start my learning.
Groups can be created with the groups.insert() API call which is part of the Admin SDK Directory API. Note that it's only possible for Google Apps Administrators to programatically create Google Groups within their domain, non-Google Apps accounts cannot create groups via this API.
There is no API for creating groups outside of a Google Apps domain you control.
Answer from Jay is the best starting point if you decide to manage this within a domain.
I recently purchased a domain with Yahoo Domains for my GAE app. Where I managed to get the domain mapped into my GAE account.
Now, since GAE does not support naked domains, I just placed the CNAME for www to point to Google App Engine.
Everything works fine now, i.e. my app can be accessed through http://www.my-example-domain.com
The problem is with naked domain (with Yahoo), I am trying to forward the naked domain http://my-example-domain.com to http://www.my-example-domain.com however, the domain manager is complaining that the forward is not possible.
What could be the problem that forward is not possible? Also, is there a way to solve this in GAE management console, since Yahoo domain manager seems to not able to handle this.
Hi Please try to do the following changes from your Google Apps Admin Console.
Go to this URL for Domain Management Settings in Google Apps Console.
Under the Domain Management. Click on change redirect and add www.example.com. Also check the attached screenshot for the same.
Also follow the instructions provided in the URL change A record below change redirect url.
After making these changes you will see the URL will get redirected automatically.