Google App Engine Authentication

Question

When I create a new application in App Engine, I can choose whether to allow any standard Google accounts to register in my application or restrict access to one of the Google Apps domains.

I’m afraid that only a Google account can damage the reception of the application.

Is it possible to use simple authentication mechanisms such as Realm in Tomcat or something similar. This means a typical email address / password.

Answer 1

You can fully implement your own authentication mechanism. The one that AppEngine provides for free is tied to Google accounts, but you can minimize your own. Just be careful, as developing a truly strong, secure, and reliable authentication scheme is extremely difficult.

Answer 2

I would suggest openID, and if necessary to exchange data with external systems, oauth. I think that users will tend to respond well to openID for authentication, as opposed to being asked to unlock their user credentials.

I would recommend dyuproject if you are using java.