NotAllowedError while redirecting to the login page

[Mayank Sharma]

Hi,

I have a google app with authentication restricted only to my google
apps domain users. I am using the following code to redirect the user
to login in case the user is not logged in.

self.redirect(users.create_login_url("/"))

This was working fine until yesterday (before the 1.1.9 release), But
today when I go to homepage of my app, instead of redirecting to the
login page, I get the following error.

Traceback (most recent call last):
File "/base/python_lib/versions/1/google/appengine/ext/webapp/
__init__.py", line 501, in __call__
handler.get(*groups)
File "/base/data/home/apps/zebuengine/2.331336139814018406/main.py",
line 90, in get
redirect_address = users.create_login_url("http://
zebuengine.appspot.com/")
File "/base/python_lib/versions/1/google/appengine/api/users.py",
line 156, in create_login_url
raise NotAllowedError
NotAllowedError

This is still working fine for my application in which i have
authentication set to gmail users. But not working now only for my
google apps domain users. Is something broken in the new release?

Regards,
Mayank

[Marzia Niccolai]

Hi,

If you restrict authentication to a specific domain, when a user is logged in it must also serve off of that domain.

-Marzia

[Mayank Sharma]

Hi Marzia,

Thanks for your help. I could get my application working once I moved
it to my domain from appspot.com. But why is this restriction
introduced? I think things were quite good with *.appspot.com

-Mayank

On Feb 12, 12:25 am, Marzia Niccolai <ma...@google.com> wrote:
> Hi,
>
> If you restrict authentication to a specific domain, when a user is logged
> in it must also serve off of that domain.
>
> -Marzia
>

[Marzia Niccolai]

Hi,

This restriction had originally been in place, but it broke a few months back.  It was recently fixed, hence the change in behavior you noticed.

-Marzia

[Arun Shanker Prasad]

Hi,

Thanks for the reply Marzia. But if I am not mistaken this
restriction was not there earlier, I am sure that I could check the
version from my App Engine Dashboard and click on the new version and
check it out so as to make sure everything was working fine. Can we
give something like appversion.latest.googleappdomain.com?

Thanks,
Arun Shanker Prasad.

On Feb 12, 10:15 pm, Marzia Niccolai <ma...@google.com> wrote:
> Hi,
>

> This restriction had originally been in place, but it broke a few months
> back.  It was recently fixed, hence the change in behavior you noticed.
>
> -Marzia
>

[Arun Shanker Prasad]

Hi,
Thanks for the reply Marzia. Sorry didn't read the whole post...

Can we give something like appversion.latest.googleappdomain.com?

Can we set a new sub-domain for this?

Thanks,
Arun Shanker Prasad.

On Feb 13, 1:23 am, Arun Shanker Prasad <ArunShankerPra...@gmail.com>
wrote:

[ID]

I'm having this same problem (i think)

I have setup an app 'idnet1' that is restricted to domain
'ismetdere.com'

uploaded my working app, mapped my domain.

http://idnet1.ismetdere.com/ shows 400 bad request
http://idnet1.appspot.com/ shows notAlloved error

On Feb 13, 1:15 am, Marzia Niccolai <ma...@google.com> wrote:
> Hi,
>

> This restriction had originally been in place, but it broke a few months
> back.  It was recently fixed, hence the change in behavior you noticed.
>
> -Marzia
>