GSP499

Overview

In this lab, you build a minimal web application with Google App Engine, then explore various ways to use Identity-Aware Proxy (IAP) to restrict access to the application and provide user identity information to it. Your app will:

• Display a welcome page

• Access user identity information provided by IAP

• Use cryptographic verification to prevent spoofing of user identity information

What you'll learn

• How to write and deploy a simple App Engine app using Python

• How to enable and disable IAP to restrict access to your app

• How to get user identity information from IAP into your app

• How to cryptographically verify information from IAP to protect against spoofing