Package gaesigner implements signing.Signer interface using GAE App Identity API.

GetAuthDB fetches AuthDB snapshot from the datastore and returns authdb.DB interface wrapping it.

InstallHandlers installs HTTP handlers for various default routes related to authentication system.

EmailScope is a scope used to identifies user's email.

CookieAuth is default cookie-based auth method to use on GAE.

InboundAppIDAuthMethod implements auth.Method by checking special HTTP header (X-Appengine-Inbound-Appid), that is set iff one GAE app talks to another.

OAuth2Method implements auth.Method on top of GAE OAuth2 API.

SessionStore stores auth sessions in the datastore (always in the default namespace).

UsersAPIAuthMethod implements auth.Method and auth.UsersAPI interfaces on top of GAE Users API (that uses HTTP cookies internally to track user sessions).