I'm having an issue adding a collaborator on an App Engine project.
The collaborator gets an email from App Engine, clicks the link, and is presented with an accept button. Pressing accept seems to do nothing, and the collaborator is still listed as "pending" in App Engine's permissions.
Make sure the person you are inviting is logged in under the proper Google Account. Sometimes you can end up logged into your personal Gmail when your browser hits the Accept URL, even though you clicked the link from a different email address (for instance, a Google Apps address for a new employee).
Related
I have a GAE project (myproject.appspot.com) which I'd like to serve from a custom domain (myapp.com).
I have added the custom domain to my Google Apps account for my company (example.com)
On my dashboard I have successfully added my domain. This is confirmed; it says myapp.com - Active
Following Google's instructions, I perform step 3 (click "Add Domain"), which attempts to log me in using my normal admin account:
Problem #1, it won't let me perform this step:
You are trying to access Google Admin of myapp.com but you do not have a valid logged in account for it.
I have successfully performed step 4 (Activate this service), and my app appears under "App Engine Apps" for my company.
This page displays: Web address — Your users can access MYPROJECT at: https://myproject.appspot.com — Add new URL
I then click on "Add new URL", which offers me a chance to select a domain from a pulldown list that includes all the domains I own on this account (i.e. both example.com and myapp.com).
Problem #2, it won't let me perform this step. I choose http://myapp.com and click [Add]. When I do this, I get an alert in a red popup box that says The term 'myapp.com' is not allowed. The single quotes are unescaped and appear as "'"
I can successfully add the URL for my company domain (example.com) just fine. But it throws an error/alert if I select myapp.com instead.
Why is Google Apps preventing me from using this domain? I clearly own it, and it appears on
the pulldown menu. Why does it say "the term" is not allowed, as if it's a typo? Is this a bug in parsing the unescaped quote characters?
I found a great (and very obscure) solution.
First of all, Google doesn't tell you this, but the custom domain cannot be a secondary domain on your Google Apps account. Only the primary domain can be selected for "Add new URL."
There are two solutions. One is to add the second domain (myapp.com) to your Google Apps account as a domain alias for the primary (example.com), not a secondary domain. This may not be acceptable for many users, since it means you cannot use myapp.com to deliver different content from example.com.
The second solution is to create an entirely independent, separate Google Apps account, and make your domain (myapp.com) a primary domain for that account. This too may not be acceptable for many users, since you may not feel like paying for a Google Apps account (minimum of $50 per user per year). However, there is a very cool way to get a Google Apps account for free.
You can create an independent Google Apps account with exactly 1 user, and then delete Google Apps for that user. This sounds weird, but stay with me. The superuser account remains, so you can administer the domain and the App Engine app. What you give up are the paid services: gmail,docs,calendar, etc. for that user, which means you're not obliged to pay the $50/year.
Here's the recipe. You will need:
a) a Google User account (e.g. joe#myapp.com created at http://gmail.com)
b) an App Engine account (e.g. http://appengine.google.com)
c) a Google Apps account (e.g. http://admin.google.com/myapp.com)
Create your Google Apps account, you will get a free 30-day trial.
Make sure your user (a) is an owner of the app engine project (b).
Make sure you add your app engine project (b) to your Apps account (c).
Under "Admin Console / More controls / App Engine Apps" ("add services", click icon in upper right corner)
Here's where you delete the paid services and keep the Apps account for free:
In the admin console, choose Company Profile / Profile.
Scroll all the way down to Account Deletion. Look for the text "One or more subscriptions are still active. Please cancel these subscriptions "
Click "subscriptions".
Click "Google Apps".
Click "Cancel Google Apps" (It's the ⃠ icon on the extreme right side of page)
This will delete the paid services (gmail,docs,cal, etc.) so you will no longer have access to any of those. Gmail will not handle any email sent to joe#myapp.com. You will need to set up the MX records for myapp.com to point to some other service if you want to enable email for the myapp.com domain. But you will have the myapp.com domain associated with your Apps account and with your App Engine app, for free, and you will be able to log in as joe#myapp.com to administer them both.
At some point, if you change your mind and decide you want Gmail for your users, you are always welcome to add the Google Apps service back on, and of course purchase licenses for $50/user/year.
You need to add the GAE app from your Google Apps for Domain account. There is a form where you can add an appengine app to your Google Apps account, but it's not in your GAE account, it's in your Google Apps account.
I'm unable to map a custom domain to my Google App Engine app. The steps I've already taken are:
I'm the admin of the Google Apps account
I'm the owner of the Google App Engine Account
I've added the domain to the "Domains" section of Google Apps
I've verified ownership of the domain within Google Apps
I've correctly setup the MX records of the domain
I've checked that the domain was correctly setup using: https://toolbox.googleapps.com/apps/checkmx/
However, for the last 3 days in the Domains section of Google Apps it says "MX records setup validation in progress".
Additionally, when I go to add the domain within the Application settings of the Google App Engine account I get redirected to a sign in page (despite already being signed in, and an admin within Google Apps, and the owner of the Google App Engine app). Either way when I go to sign in again I just get redirected back to the signin page and I'm not able to get any farther.
Also, I have billing enabled for the App Engine account. I've configured app engine domains numerous times before and never had these issues. Any help would be appreciated.
Update:
Following #presveva's suggestion I setup a new Google Apps account (despite already having an existing one) and the first page after creating a new Google App was a server error. After refreshing the page and verifying ownership of the domain I went to add the domain to App Engine.
On the "Please accept the Google App Engine terms and conditions to continue" page, first of all no terms even showed (numerous XMLHttpRequest errors on the page), and after submitting "I accept. Continue to add this service" the next page stated "An error occurred while trying to install this application. Please try again later."
This process is horribly broke and would be great if Google addressed this.
I know this this post is old but I ran into the same issue.
All ready running Google Apps for my primary domain.
Created a new app and registered a new domain name for that.
Don't want to get a new payed Google Apps account for the app domain.
#presveva is right but there is one way around it.
Use your current Google Apps account and add the app domain as a alias for your primary domain.
Make the admin account of your Google Apps domain owner of the Google App Engine (GAE) application.
Add the GAE app to your Google Apps account via the Google Apps admin interface.
Setup a custom domain name for the domain alias, your new app domain.
Note: If you use Google Sites for your domain you can't use www. Disable sites if you want to use GAE.
For now, the only one way for using custom domain in GAE is signup a Google Apps account (domains article).
Notice that the domain need to be the primary domain of account, a new account for domain.
The docs I have linked mentions a free single-user account but it has been replaced by a 50$ credit for a business Google Apps account (forum annunce)
I have a Google App Engine Java application which is embedded (via a Gadget) in a Google Site. The app is built for a Google Apps customer and therefore is set to require Google authentication with that customer's domain - as is the site it is embedded in.
In general this app is only ever to be used within the site. Users never have to explicitly log into the app - it inherits their login session from the parent frame (assuming third party cookies are not blocked in the browser).
We use a standard UserService pattern, as per the docs:
UserService userService = UserServiceFactory.getUserService();
User user = userService.getCurrentUser();
if (user != null) {
// do ALL the things!
} else {
resp.sendRedirect(userService.createLoginURL(req.getRequestURI());
}
A logged in user gets in a SACSID cookie set for the myapp.appspot.com domain, the HTTPS version of the ACSID cookie.
When users log out of the containing site, by clicking the standard "Log Out" button in their Google account, the users are now logged out of their Google account, but they can still access the application. userService.isUserLoggedIn() also returns true.
(We can't have the user log out using the App Engine logout URL, as in general, they don't even know they are using an App Engine application - it's just content embedded on a site.)
If you reproduce this by browsing to the servlet directly, rather than the site, and then log out of your Google account, about 2-3 minutes after the user signs out, the UserService detects this and redirects the user to the login screen as expected. However, in a situation where people may log off the parent site and then log in again in short notice, there are cases where people are getting the wrong privilege level in the application.
How can we detect this instantly and react appropriately?
Google App Engine permissions.
I have GAE account and I am trying to invite access to another user
The email is sent and the user pasts the link into Chrome incognito window
The user is asked to login which works but then it says
You are not authorized to access this application
The user has its own app engines
I can think of nothing else - is there a limit to number who can be invited?
Make sure that the user is logging into the account that you invited (an easy way to do this is by having them just click the link rather than using an Incognito Window). If it still doesn't work, I would suggest you file a bug in the issue tracker.
At our company we are experimenting with the Google App Engine.
There is already an app online and they wanted to add me to this existing app.
We tried to do this several times but I still can't access the existing app.
The email you receive when you are added to an existing app consists of 2 links.
- one for coupling it to an existing Google account
- one for coupling it to the receiving email address which is a Google Account
If i follow the link in case 1, I'm redirected to a page where I need to create a new application.
If i follow the link in case 2, I get the following Server Error:
"Sorry, you've reached a login page for a domain that isn't using Google Apps. Please check the web address and try again."
If one of my colleagues looks at the Permissions page of all users, my status is pending...
Anyone an idea?
Your accounts are on Google Apps? if is the case, you need to use the good link; In the email you received you should have 2 links to validate account. The first is for google account and the second is for google apps account.