Add stub pages and oauth-blessed request to /newui

appengine/swarming/app.yaml

Index: appengine/swarming/app.yaml
diff --git a/appengine/swarming/app.yaml b/appengine/swarming/app.yaml
index 4fcd930ca2fd94dfbe81eeaab8113c7c291a8293..3caae89d6ea8e09792a7b8c481c759ab28c6b47e 100644
--- a/appengine/swarming/app.yaml
+++ b/appengine/swarming/app.yaml
@@ -66,6 +66,30 @@ handlers:
   secure: always
   login: admin
 
+- url: /newui/

[stephana, 2016/07/24 21:17:06]

Nit: It looks like the elements folder will contain the entire frontent app
(including the index.html file). 
In the long term the application path should match the path of the file system
where the ui lives. 

[kjlubick, 2016/07/25 12:45:43]

This is true.
I'm not quite sure what you mean by this.

[kjlubick, 2016/07/25 13:10:59]

I added a TODO to consider this later when it is closer to completion.

+  static_files: elements/build/index-build.html
+  upload: elements/build/index-build.html
+  secure: always
+  http_headers:
+    # TODO(maruel): Unsure about polymer if it is inline-style free.
+    # TODO(maruel): Polymer abuses eval() and http://crbug.com/277857 gets in
+    # the way.
+    Content-Security-Policy: "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'"
+    Strict-Transport-Security: "max-age=31536000; includeSubDomains; preload"
+    X-Frame-Options: deny
+
+- url: /newui/(.+)
+  static_files: elements/build/\1-build.html
+  upload: elements/build/([^/]+)-build.html
+  secure: always
+  http_headers:
+    # TODO(maruel): Unsure about polymer if it is inline-style free.
+    # TODO(maruel): Polymer abuses eval() and http://crbug.com/277857 gets in
+    # the way.
+    Content-Security-Policy: "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'"
+    Strict-Transport-Security: "max-age=31536000; includeSubDomains; preload"
+    X-Frame-Options: deny
+
 - url: .*
   script: main.app
   secure: always