Android Client - Google App engine authentication using Google Cloud Endpoints -
i have web application written on python / google appengine / webapp2 framework. web application has native (custom) authentication. userid / password managed application (and not use google accounts).
the web application needs extended mobile clients well. developing native android client application , trying integrate google appengine.
for authentication android client google app engine, trying keep simple using google cloud endpoints. can please suggest if approach below correct ?
- generate white list of client ids using google app engine console (for android, web , ios).
- create google cloud endpoint backend api (in python) white list of clients(web, android , ios) suggested here – https://cloud.google.com/appengine/docs/python/endpoints/getstarted/backend/
- create backend library.
- import library android client
my expectation after above follows –
- end users using google cloud endpoints api (from android client) authenticate android client google app engine.
- as part of secure authentication of client-gae, can pass user login-id parameter of api calls , data / post data particular userid.
- i storing userid (not password) end-user using local storage in mobile client.
can please suggest if approach above correct? purposefully avoid using google accounts based authentication android client gae.
in order app engine user instance injected api method google cloud endpoints, need using google account in android app. service builder in android code takes googleaccountcredential.
you can still support own userid , password, can't leverage user injection if do.
[edit]
if you're not going use google accounts in android app, forget sha1 , api key. you're going have roll own auth. it's how this, might start session api call takes username , password , returns token. other api calls might take token , check validity before returning result, example.
Comments
Post a Comment