4
votes

I'm very confused with how the Google App Engine (GAE) User/login API works. They mention you can authenticate Users via Google Accounts, Google Apps Accounts, or OpenID.

I don't want to force my users into requiring them to have GMail accounts, any other kind of Google account (Apps or otherwise), or an OpenID account. If my user has a valid email of [email protected], then he/she should be able to register with my app, get an account with us, and login using that valid email.

So my question is: is this even possible, or does GAE require users to have GMail or OpenID accounts first?!?

If this is possible, then can I still use the User/login API service that GAE provides, or do I have to use my own homegrown login/authentication system? And, if I have to use my own system, are there any restrictions as to what I can/can't use/do?

Thanks in advance!

1

1 Answers

2
votes

You can optionally use Google Apps domains if you want - that will work perfectly.

But if you do not want to use any of the options that Google provides or for that matter, any other OAuth based security service, then you will need to roll your own authentication mechanism.

I do not think any restriction is put on that. You will need to define your entities in the Datastore and come up with your own authorization/permissions stuff.