python - Marketplace App SSO issue with Google Appengine - additional prompts are causing App to be refused by Google Team -
we have google apps marketplace app need upgrade use oauth2 or removed marketplace.
we have implemented oauth2 specified @ (example best practices) link:
https://code.google.com/p/google-api-python-client/source/browse/samples/appengine/main.py
now when user log in app (even thought domain admin has installed app , granted access) user prompted message "your domain administrator has approved access xxxxx".
the question why , cause app fail marketplace best practices , rejected marketplace?
oauth2 handled following scopes / code using built in python appengine decorators:
decorator = oauth2decorator( client_id='ourclientid', client_secret='ourclientsecret', scope='https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile')
the same scopes added via marketplace sdk , granted domain admin?
i believe google removing apps marketplace month not use oauth2 sso.
it turned out oauth2 python decorators causing problem, when looking @ flow url see asking offline access. sso working using supplied decorators need override them request online access. offline access causes additional prompt user "your domain admin has approved access app".
also scopes use sso (as of 10th september 2014) email profile (no longer full ur)
i hope may save others hours looking through documentation!
cheers, ian.
Comments
Post a Comment