October 2011
Intermediate to advanced
352 pages
7h 58m
English
This chapter presents Google’s APIs for authenticating users and authorizing access by third parties. It starts by explaining Google Accounts API then discusses the use of OpenID for external identity providers. The OAuth API, which allows your application to securely expose data to third-party applications, is demonstrated next. This chapter ends with a brief discussion of general security concerns specific to the App Engine.
In most web applications, you want to be able to store data for your users. You also want to be sure that users cannot read or modify each other’s data. Even when users’ data is of a public nature, you ...
Read now
Unlock full access