So I can see that GCE provides builtin support for authentication via a Google Account.
I am wondering what would be a good way to continue to use the above for authentication, and then add some custom authorization logic (the builtin support for admin vs. not admin is not granular enough).
To be clear, I want to be able give different users different rights within the application. Ideally this would be stateless since I do not want to do a datastore query every time a user makes a request.
So I can see that GCE provides builtin support for authentication via a Google Account.
I am wondering what would be a good way to continue to use the above for authentication, and then add some custom authorization logic (the builtin support for admin vs. not admin is not granular enough).
To be clear, I want to be able give different users different rights within the application. Ideally this would be stateless since I do not want to do a datastore query every time a user makes a request.