Google App Engine service-to-service authentication (non-programmatic)

Question

I have a scenario where I have an on-premise GUI application which has a "Web Service Invoke" component which I use to call a GAE API. In the GUI application, it i