Questions related to Google Cloud Identity Aware Proxy
Questions tagged [google-iap]
114 questions
0
votes
1 answer
Google IAP In App Purchase auto-renewing subscriptions Webhook for Subscription update / cancellation in NodeJS
Is there any way to implement a Webhook for automatic update of subscriptions on server side, in nodejs for example, for situations such as: the user renewed or canceled his subscription?
Currently I save the subscription data in my Database after…
![](../../users/profiles/8916943.webp)
Gsilveira
- 81
- 1
- 3
0
votes
0 answers
Using google API gateway as single access point for app engine
Recently I've implemented a couple of microservices on App engine, and I wanted to secure them through an API gateway (NO CLOUD ENDPOINTS) that authenticates every request before forwarding it to the backend. However, App Engines have a public…
![](../../users/profiles/14106548.webp)
AndreaCostanzo1
- 514
- 1
- 15
0
votes
0 answers
How to authenticate through Google Cloud IAP with client from gapi (google-api-javascript-client) library?
Given a client-side app (written in Angular, but it's not much important) where I use google-api-javascript-client library to authenticate users. In a way described here - https://developers.google.com/sheets/api/quickstart/js:
…
![](../../users/profiles/27703.webp)
Shrike
- 8,358
- 7
- 61
- 98
0
votes
1 answer
IAP from Service account OIDC Token : 401 Unauthorized
Hello, in a sh script i try to call an api in App Engine Standard (with a POST) behind an IAP.
I use a service account who have the "IAP-secured Web App user" permission.
The service account is from an another account that the IAP.
I first generate…
![](../../users/profiles/14808740.webp)
llld
- 1
- 1
0
votes
1 answer
How to unactive IAP in google cloud project?
I have a problem on a GCP Project
I Added IAP on the app. I allowed every user on the professional google domain.
I found that IAP was not a good solution. I finally removed IAP from the project. I un-toggled the functionality. And I removed the…
![](../../users/profiles/14436531.webp)
Tim
- 1
0
votes
1 answer
Identity Aware Proxy (IAP) for a URL - Google app engine
We have two projects -
Project 1 - Google App engine standard python 2.7.
Project 2 - Google Appp engine standard python 3.3
Project 1 application is secured using Firebase user authentication.
We have a need to access a particular function (URL) of…
![](../../users/profiles/3647998.webp)
Jack tileman
- 469
- 5
- 14
0
votes
1 answer
Obtaining refresh_token through offline_access scope to be used with IAP
I am using IAP to protect a Web API Application. I have enabled a service account to get access to the APIs through an id_token. I am able to obtain an id_token (JWT) by signing a JWT (using the keys of my service account) with the following…
![](../../users/profiles/1433753.webp)
Jose Manuel Cantera
- 738
- 3
- 4
0
votes
0 answers
IAP access token with Gmail API
I have the following Error
google.auth.exceptions.RefreshError: The credentials do not contain the necessary fields need to refresh the access token. You must specify refresh_token, token_uri, client_id, and client_secret.
My project is built with…
![](../../users/profiles/10628959.webp)
Raphael Obadia
- 117
- 11
0
votes
0 answers
IAP authenticated requests from one GAE service to another
I have two GAE apps deployed in the same project but on different services:
frontend react client (app-mygoogleproject.appspot.com)
backend graphql server (backend-mygoogleproject.appspot.com)
Without IAP, the frontend works as intended and is…
0
votes
1 answer
Query based parameter routing Google load balancer - IAP
Recently, I was testing Google https load balancer with query based parameter routing, after configuration, I found that I'm not able to activate IAP on any backend services except default backend , none of backend appeared in IAP.
For http, as per…
![](../../users/profiles/13723541.webp)
Adam
- 89
- 5
0
votes
2 answers
CDAP DataFusion GET Pipeline Runs Invalid IAP Credentials Error
I am trying to do a GET API call to get specific pipeline run history. The API URL is as follows
APIEndpoint/api/v3/namespaces/default/apps/DataPipeline_name/workflows/DataPipelineWorkflow/runs?limit=1
This API call needs a access token which I get…
![](../../users/profiles/4344266.webp)
Naitik
- 39
- 8
0
votes
0 answers
Runs into this error while setting up IAP on a GCP compute engine?
Hi I am trying to set up an Identity Aware Proxy on a compute engine following those instructions here. After setting up IAP, I get the following error "Error: ERROR: JWT validation error Token has wrong audience…
![](../../users/profiles/13834496.webp)
ralphiee
- 1
0
votes
1 answer
How to call Cloud Run from out side of Cloud Run/GCP?
I have a simple Spring Boot service 'say-hi' to take GET request under /say-hi and return 'hello'. It's deployed in managed Cloud Run. Suppose I don't want to open it to the general public. Now I wanted to do two things:
1. allow developer (I…
![](../../users/profiles/3708718.webp)
foxwendy
- 2,239
- 22
- 37
0
votes
0 answers
Google Cloud App Engine - req.user is undefined
I am running a nodejs reactjs app on google clouds app engine. I am using a local passport authentication system.
On my localhost calling req.user in my server returns the users details. However when running my app on google cloud it returns…
![](../../users/profiles/4575796.webp)
Ben
- 9
- 4
0
votes
1 answer
Getting IAM policy on App Engine resource
I have a GCP project with an App Engine app resource. I use Identity-Aware Proxy to set users and roles on the App Engine app in the console. I now want to manage users in IAP programmatically.
Currently, I am able to get the IAM policy for "All…
![](../../users/profiles/6883119.webp)
Ben
- 35
- 6