Questions related to Google Cloud Identity Aware Proxy
Questions tagged [google-iap]
134 questions
0
votes
1 answer
Obtaining refresh_token through offline_access scope to be used with IAP
I am using IAP to protect a Web API Application. I have enabled a service account to get access to the APIs through an id_token. I am able to obtain an id_token (JWT) by signing a JWT (using the keys of my service account) with the following…
Jose Manuel Cantera
- 853
- 4
- 4
0
votes
0 answers
IAP access token with Gmail API
I have the following Error
google.auth.exceptions.RefreshError: The credentials do not contain the necessary fields need to refresh the access token. You must specify refresh_token, token_uri, client_id, and client_secret.
My project is built with…
Raphael Obadia
- 333
- 5
- 14
0
votes
1 answer
Query based parameter routing Google load balancer - IAP
Recently, I was testing Google https load balancer with query based parameter routing, after configuration, I found that I'm not able to activate IAP on any backend services except default backend , none of backend appeared in IAP.
For http, as per…
Adam
- 99
- 5
0
votes
2 answers
CDAP DataFusion GET Pipeline Runs Invalid IAP Credentials Error
I am trying to do a GET API call to get specific pipeline run history. The API URL is as follows
APIEndpoint/api/v3/namespaces/default/apps/DataPipeline_name/workflows/DataPipelineWorkflow/runs?limit=1
This API call needs a access token which I get…
Naitik
- 49
- 10
0
votes
1 answer
How to call Cloud Run from out side of Cloud Run/GCP?
I have a simple Spring Boot service 'say-hi' to take GET request under /say-hi and return 'hello'. It's deployed in managed Cloud Run. Suppose I don't want to open it to the general public. Now I wanted to do two things:
1. allow developer (I…
foxwendy
- 2,819
- 2
- 28
- 50
0
votes
0 answers
Google Cloud App Engine - req.user is undefined
I am running a nodejs reactjs app on google clouds app engine. I am using a local passport authentication system.
On my localhost calling req.user in my server returns the users details. However when running my app on google cloud it returns…
Ben
- 9
- 1
- 4
0
votes
1 answer
Getting IAM policy on App Engine resource
I have a GCP project with an App Engine app resource. I use Identity-Aware Proxy to set users and roles on the App Engine app in the console. I now want to manage users in IAP programmatically.
Currently, I am able to get the IAM policy for "All…
Ben
- 213
- 2
- 11
0
votes
0 answers
How do I modify IAP OauthClient
I just noticed that two of my projects have the same OauthClient for IAP on GCP.
I want to update one of the IAP resource so that each of my projects got unique OauthClient but I can't find how..
Any help ?
Workaround
So this ain't a solution but in…
Kimor
- 532
- 4
- 17
0
votes
2 answers
Making credentialed requests with Bokeh AjaxDataSource
I have a plot set up to use an AjaxDataSource. This is working pretty well in my local development, and was working as deployed in my Kubernetes cluster. However, after I added HTTPS and Google IAP (Identity-Aware Proxy) to my plotting app, all of…
Herbert Lee
- 57
- 3
- 7
0
votes
1 answer
Failed to authenticate to Cloud IAP Backend from Cloud Tasks HTTP Request
I'm trying to use Cloud Tasks HTTP Requests to reach a Kubernetes endpoint behind an HTTPS Load Balancer protected by Cloud IAP.
The endpoint works using any Gsuite company account as it should be but when the Cloud Task executes this is the Cloud…
Federico Ferri
- 31
- 1
- 5
0
votes
2 answers
Error accessing a IAP resources when authenticating from a service account - 502 server error
We are trying to implement server to server authentication and access an IAP resource per documentation here.
url = "https://project-name-B.appspot.com" # This is the IAP resource. This application is hosted in a different project. Lets call this…
Jack tileman
- 813
- 2
- 11
- 26
0
votes
1 answer
Identity Aware Proxy(IAP) for Google Cloud endpoints OpenAPI
We have an application (say App-B) that is developed in Python 3.7 standard environment.
This application will be accessed only by another project (application) that is part of GAE.
Do we need to expose the App-B using Google Cloud endpoints to…
Jack tileman
- 813
- 2
- 11
- 26
0
votes
1 answer
Why is Google IAP putting double-digits request cookies in my headers?
I have an app running on Google app engine (Flask, python 3, flexible environment) using the Identity-Aware proxy to allow everyone in our organization (which uses GSuite) to control access. Recently we've been getting 413 errors.
When I looked at…
aaymeloglu
- 1
- 3
0
votes
1 answer
Google Cloud - strange response from IAP.GetIamPolicy API
I'm doing a POST to https://iap.googleapis.com/v1/projects/MY_PROJECT_ID/iap_web:getIamPolicy with an empty body as the documentation specifies.
The API response is an HTTP 200 with the body simply being {"etag": "ACAB"}
What does this mean? What…
Robert Levy
- 28,747
- 6
- 62
- 94
0
votes
1 answer
Does BackendConfig override the console when configuring IAP for a HTTPS resource?
I have an API protected by IAP on GCP which is configured via a backendconfig. It works fine. As well as turning IAP on/off via backendconfig, you can do the same via the console UI.
If my backendconfig says IAP is enabled, then I disable it using…
insano10
- 113
- 2
- 6