Create an alternate login to Google Users for the Google App Engine

How to handle user login and logout / creation without using Google users? I would like some more options and then just email and password. Is this just a case of creating a user model with the fields I need? Is it safe enough?

Alternatively, is there a way to get a user to log in using a Google ID, but not redirecting to the actual Google page?

+4
source share
2 answers

I recommend using OpenID, see here for more, like Stack Overflow !!)

+8
source

If you upload your own user model, you will also need to do your own session processing; The App Engine user API creates login sessions for you behind the scenes.

In addition, although this should be obvious, you should not store the user's password in clear text; store the SHA-1 hash and compare it with the password hash of the user, which is entered at login.

+1
source

All Articles