Google App Engine + JSON based service + Authentication

Question

I am new to GAE (cloud based development in general actually) and I am looking for some advice.

I am looking to use GAE only as a service (REST + JSON) with my client-side in Sproutcore. I am looking to find a light-weight service-based framework that will provide me with strong security (authentication, protection against XSS etc).

Java or Python is fine, the priority being speed and security.

Does anybody have any ideas on this? Any links to relevant information. I am going through an information overload phase. Any help in this regard would be much appreciated!

Thank you.

Answer 1

How about tipfy, a open source lightweight python-based framework made for GAE?

Its core can be enhanced through usage of extensions.

• Combining some of those extensions would allow you to perform auth against different systems (Google, Facebook, Twitter...) or against your own baked one. An example of this can be found here, source code is available here.

• A really simple sample of JSON rendering is available here.

Of course, other python frameworks run on top of AppEngine. You'll find in the AppEngine-Python google group, a thread discussing pros/cons of most of them.

Considering speed, those links may shed some light on the subject

• Choosing Java vs Python on Google App Engine
• Google AppEngine Language Performance Comparison Followup

Answer 2

So looks like I can't comment on your answer but the link was very helpful! Looks very much like something I am looking for:

1. Server-side sessions
2. Custom user authentication
3. JSON based service with no View layer
4. Fast and secure

Any other python framework that you might possibly know of along the lines of Tipfy? Just so I have something to compare with?

Does anybody know of any Java libraries along the same lines of Tipfy?

Thanks again for the link!

Edit 1:

1. Hmm...I have no idea how I ended up with 2 accounts. I'll try to iron it out..
2. Your links were very helpful..Thanks!
3. I am inching towards Tipfy at this point, but I think I am going to wait a little longer on this thread to see if I get some more opinions..

Thanks again...