I have a GAE app where I need users to log in from domain.com as well as sub.domain.com, sub2.domain.com, etc. I have created an app that restricts users to log in from domain.com, but then when i use the code:
<a href="<%= userService.createLoginURL(request.getRequestURI()) %>">Sign in</a>
Users are taken to a login page that restricts entry to ___@domain.com and therefore does not allow users at sub.domain.com to enter in their emails and passwords to log in.
How can I go about making this possible?
Ok, so the answer is to recreate the application (yes, with a different name — arg!) and to choose the last authentication option: OpenID. But this does mean that you need to put code in your app to ensure the people logging in are the ones you want to log in!