how to bypass google sign-in page in app engine to access certain html file in java

Question

How to bypass google sign-in page in GWT with GAE to access certain html file in Java backend servlet? I tried to put the security-constraint in web.xml like following :

 <security-constraint>
    <web-resource-collection>
        <web-resource-name>verifysite</web-resource-name>
        <url-pattern>/test.html</url-pattern>
    </web-resource-collection>
    <auth-constraint>
        <role-name>*</role-name>
    </auth-constraint>
  </security-constraint>

But it still doesn't work. It always redirect me into the google sign-in page.

Thanks.

Answer 1

Role-name * means that you want your users to be logged in to access the resource :

If the authorization constraint specifies a user role of *, then any users signed in with a Google Account can access the URL

https://developers.google.com/appengine/docs/java/config/webxml?hl=FR#Security_and_Authentication

If you want test.html to be available to anyone, its URI must not be in the scope of any <security-constraint>.