python - Google App Engine inter module communication authorization -
in google docs says
you can configure manual or basic scaling module accept requests other modules in app restricting handler allow administrator accounts, specifying login: admin appropriate handler in module's configuration file. restriction in place, urlfetch other module in app automatically authenticated app engine, , request not application rejected.
so did that, unfortunately not work. requesting url module on module b protected login: admin property
i can fetch url in browser shows me login page , after continue admin can fetch route.
how supposed work? far understand should add header request includes kind of authorization token.
if fetch same url within request on module same redirect. urllib2 follows 302 status code default , result login page.
i running environment using gcloud preview app run command. module default module , module b managed vm container, might problem here?
i can confirm occurring, , i've reproduced issue. issue being tracked on in app engine public issue tracker. follow there updates.
for now, think it's better manually-inspecting x-appengine-inbound-appid header, managed infrastructure , can't spoofed.
you implement oauth, adds overhead may not want or need on small app.
Comments
Post a Comment