Google App Engine plugin for AuthKit

This package contains the components to support authentication and authorization on the Google App Engine. The authentication and authorization components are independent of each other, so you can use them separately.

Using the authentication

To use the GAE Users API based authentication all you need to do is put the following values into your configuration file: authkit.setup.method = google authkit.google.signoutpath = /path/to/signout

The authkit.google.signoutpath work just like authkit.cookie.signoutpath, and just like the latter can be omitted if you don't wish to allow signing out.

You can also specify the UsersProvider it will use to acquire the roles of the signed in users by setting: authkit.google.authenticate.user.type = package.name:UsersProvider authkit.google.authenticate.user.data = ... Where package.name:UsersProvider should be replaced with a valid authkit.users.Users subclass.

Using the authorization

If you wish to use the GAE Datastore to store the users, roles and groups, then you should use the authkit_gae.users:UsersFromDatastore class as your *.authenticate.user.type .

You can use it with either the GAE authentication plugin or with the built in forms authentication method.

UsersFromDatastore uses the predefined UserRole, UserGroup and BaseUser classes from authkit_gae.models to store the data in the Datastore. If you wish you can create a subclass of BaseUser and let the UsersFromDatastore use that by setting the *.authenticate.user.data to point to that calss, for example: authkit.google.authenticate.user.data = package.name:MyUser

Using both at the same time

When using both at the same time, you can specify a magic role that will appear for the administrators by: authkit.google.adminrole = superuser

When changing the role in a already existing system, the role name must not conflict with any other pre-existing roles in the Datastore.

Here is an example of a configuration utilizing all the features mentioned above: authkit.setup.method = google authkit.google.signoutpath = /auth/signout authkit.google.adminrole = admin authkit.google.authenticate.user.type = authkit_gae.users:UsersFromDatastore authkit.google.authenticate.user.data = myblog.models:BlogUser