How to handle HTTPS in development?

55 views
Skip to first unread message

Kaan Soral

unread,
Feb 12, 2012, 10:56:42 PM2/12/12
to google-a...@googlegroups.com
HTTP is great, easy to test on SDK, but https is a pain, SDK doesn't support two IP's.

I am thinking of building an app that will only use HTTPS, how should I proceed?

My current solution is to check if we are on Appengine in code, and if we are on Appengine and HTTP, redirect to HTTPS, otherwise SDK would run on HTTP
Very inelegant but it would work

James Broberg

unread,
Feb 12, 2012, 11:02:27 PM2/12/12
to google-a...@googlegroups.com
What you describe will work - are you on Java or Python? In Java,
Filters are very effective for this task.

> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/google-appengine/-/MrPPmha8htkJ.
> To post to this group, send email to google-a...@googlegroups.com.
> To unsubscribe from this group, send email to
> google-appengi...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/google-appengine?hl=en.

Robert Kluin

unread,
Feb 13, 2012, 2:30:31 AM2/13/12
to google-a...@googlegroups.com
Hey Kaan,
Have you looked at using "secure: always" in your app.yaml, rather
than redirecting yourself?
http://code.google.com/appengine/docs/python/config/appconfig.html#Secure_URLs


Robert

Vivek Puri

unread,
Feb 13, 2012, 6:29:17 PM2/13/12
to Google App Engine
For any urls that you add to your templates, make sure that you dont
put http: in front of them. Just leave them as //www.domain.com. Do a
project wide search and replace(and get 1000 tickets later for broken
stuff).


On Feb 13, 2:30 am, Robert Kluin <robert.kl...@gmail.com> wrote:
> Hey Kaan,
>   Have you looked at using "secure: always" in your app.yaml, rather
> than redirecting yourself?
>    http://code.google.com/appengine/docs/python/config/appconfig.html#Se...

Kaan Soral

unread,
Feb 13, 2012, 9:08:52 PM2/13/12
to google-a...@googlegroups.com
Thanks a lot Robertk
This is exactly what I've been looking for, don't know why I haven't tried it before, logically it has no effect on SDK, which is great

And thanks for everyone who answered, thanks for the tip Vivek
Reply all
Reply to author
Forward
0 new messages