Questions tagged [google-iap]

Questions related to Google Cloud Identity Aware Proxy

134 questions
2
votes
1 answer

Compute Engine and IAP without load balancer

I would like to put one Compute Engine instance behind IAP. I have read the official literature that states that a load balancer needs to be created. Since I only have one instance to protect, and no autoscaling (i.e there will always be an instance…
Stf_F
  • 846
  • 9
  • 23
2
votes
0 answers

How to make through Google's IAP in Cypress?

I come with a question because I have an application, it has IAP as a proxy before seeing the rest of the page. I want to test this page, however, IAP is standing in my way. I'm trying to wade through the docs, but I don't understand which way of…
TheTanadu
  • 554
  • 1
  • 7
  • 33
2
votes
0 answers

Airflow-2 custom api auth_backend

As we need to use stable REST API from Airflow-2.X onwards, does anyone has any success / idea / example on how to create custom api auth_backend as suggested on this page airflow-api to override authentication (allowing all request) ? We would like…
2
votes
1 answer

IAP Request - Trigger a DAG throughout a cloud function

Morning, I'm trying to make a POST request to IAP which then Triggers a DAG, however, I'm having the following error: It happens when I try this: make_iap_request( webserver_url, client_id, method='POST', json={"conf": data,…
2
votes
1 answer

How to access already authenticated user from web application behind Google Identity Aware Proxy?

I have a web application which sits behind Google's Identity Aware Proxy (IAP). IAP authenticates the user before forwarding to my web application. How can I access the already authenticated user from my web application? In Getting the user's…
2
votes
1 answer

With Identity Aware Proxy, is it possible to make a cross origin request to another GAE "service" in the same GCP project with a different hostname?

The setup: Service A (frontend): GAE serving static site, all calls made from A are happening on client side. Service B (api): GAE instance hosting REST API. Without Identity Aware Proxy, I am able to make requests from the clientside of the…
RayB
  • 2,096
  • 3
  • 24
  • 42
2
votes
0 answers

There is a way to add another ClientId to Google Cloud Identity Aware Proxy?

I was looking for a way to add another Client Id to IAP, because if I can try to request a protected resource with a token generated with an android client id but in the same project, it gives me this error: Invalid IAP credentials: JWT audience…
2
votes
1 answer

How to route user request to specific docker container based on the user id through IAP in GCP Kubernetes Engine

I am trying to come up with a hello-world prototype for GCP Kubernetes Engine using IAP to allocate a container for a specific user and route all requests from this user to this container only. It is to protect user sensitive information in a…
2
votes
1 answer

Enable IAP on Ingress

I've follow the documentation about how to enable IAP on GKE. I've: configured the consent screen Create OAuth credentials Add the universal redirect URL Add myself as IAP-secured Web App User And write my deployment like this: data: client_id:…
Djabx
  • 635
  • 1
  • 8
  • 16
2
votes
2 answers

Using Google IAP through custom domain on App Engine

Enabling a custom domain on an App Engine service is now a breeze, so is enabling IAP (Google Identity-Aware Proxy) But, I can't figure out how to get IAP and my custom domain to work together! both https://myservice-dot-myapplication.appspot.com…
2
votes
2 answers

Access Google IAP protected API from Angular

My application has 2 modules Spring boot back-end API Angular front-end (SPA application) Both were deployed in Google app engine (GAE). I used Google IAP for authentication. After enabling the IAP is there any way to generate the IAP JWT token…
2
votes
2 answers

Get the Client ID from the command line in GCP

I need to authenticate using IAP in Google Cloud Platform, but I am not able to get the Client ID of the proxy that protects the Airflow web server. I need a command to do so as I can't use the JSON keys of a service account.
manish dev
  • 97
  • 1
  • 9
2
votes
1 answer

Use Id Token from ScriptService to make API calls to IAP (Identity Aware Proxy)

I am making an addon (sidebar addon to Google Calendar) and the addon needs to call an API hosted behind a Google IAP (Identity Aware Proxy). IAP requires an openid token, and the id token needs to be granted from Google's OAuth2 service by using…
Michael
  • 1,428
  • 3
  • 15
  • 34
2
votes
0 answers

Access IAP secured resource from JS using XHR requests?

I am trying to access Google APP engine which is secured using Google Cloud IAP(Identity Aware Proxy). I am able to access the resource using postman as well as any backend service like (Node or Python) by using the identity token. But as soon as I…
2
votes
1 answer

Browser blocks API requests on SPA protected by Google IAP

I have a problem that started recently in a web application protected by Google Identity Aware Proxy. Here's my setup: An API GKE pod, served by a backend service, protected by IAP. An SPA GKE pod, service by a backend service, protected by…
1 2
3
8 9