I want to lock down a wordpress (PHP) project on GAE to be accessible only to domain users. I set up my app.yaml so all routes are login: required or login: admin , and in the appengine.google.com console, set it to use the "Google Apps domain" authentication type.
At first, it worked. However, now even if you are signed in to the domain, it behaves as if you are not authorized (returns error 500). I suspect that the difference is the instance was already warmed up the first time, whereas the second time, it was not.
Any way around this / has anyone experienced this problem and found a solution?
