google app engine - GAE task, are the urls secure by design? -

i'm trying wrap head around google app engine , more @ tasks.

my question security, if define queue :

- url: /queues/long-task   script: urlhandlers.queuelongtask.app   login: admin 

will sure /queues/long-task can accessed admin , task system ? not able find reference in google documentation.

thank in advance

you correct, login: admin takes care of it.

here can find more info on documentation: https://cloud.google.com/appengine/docs/python/taskqueue/overview-push#python_securing_urls_for_tasks

you can use headers x-appengine-queuename if want specific things when called task:

"these headers set internally google app engine. if request handler finds of these headers, can trust request task queue request. if of above headers present in external user request app, stripped."