(Java) Remote API no longer needs to be behind security-constraint

[John Wheeler]

According to the docs here:

https://cloud.google.com/appengine/docs/java/tools/remoteapi

The Remote API uses it's own authentication mechanism and apparently doesn't need an auth-constraint in web.xml. 

Can someone from Google please confirm?

Thanks

[Nick (Cloud Platform Support)]

Hey John,

Yes, putting the remote API endpoint behind an auth constraint will actually cause errors, which is why this was clarified in the docs, to prevent developers from adding one to the remote API endpoint.

Cheers,

Nick
Cloud Platform Community Support

[John Wheeler]

Thanks