Remove deprecated GAE auth and replace with Google IAP

rsc / tiddly

TiddlyWiki (actually TiddlyWeb) server for Google App Engine

BSD 3-Clause "New" or "Revised" License

122 stars 19 forks source link

Remove deprecated GAE auth and replace with Google IAP #6

Closed philips closed 4 years ago

philips commented 4 years ago

This PR builds on #4 and migrates the application to Google Cloud's Identity Aware Proxy (IAP).

I have an instance of this code running successfully at https://memex.ifup.org.

If this general approach looks OK I am happy to add a simple AUTHZ system that takes a ACL via an environment variable to allow for read-only access from anonymous users.

philips commented 4 years ago

gah, I messed this up, closing for now.