Questions tagged [google-iap]

Questions related to Google Cloud Identity Aware Proxy

134 questions
0
votes
1 answer

GKE: Identity-aware proxy > L7 load balancer > Custom host and path rules > Error code 11

I am using GKE Identity-aware proxy > L7 load balancer > Custom host and path rules. It works fine for the root-path. But it does not work for custom paths. apiVersion: extensions/v1beta1 kind: Ingress metadata: name: basic-ingress annotations: …
0
votes
1 answer

How do you programmatically add members to a single Google IAP access list?

I have 2 terraformed/k8s-yaml services that have IAP enabled. In order to maintain the member access list between infra refreshes (when the load balancers get destroyed and so the access list gets wiped) I have assigned the IAM role 'IAP-secured Web…
insano10
  • 113
  • 2
  • 6
0
votes
1 answer

How can I get a user's Google account photo using IAP and the People API? (NodeJS preferred)

I have an application that uses Google Cloud IAP to authenticate users. IAP requires the user to authenticate using their Google account, and then headers are passed to the application afterwards that identify that user (user id, user email, and a…
0
votes
1 answer

Forcing password on login with IAP and restrict domain

I've set up a Django/python web application running on Google Cloud Platform's Kubernetes Engine pods, and secured by GCP's Identity-Aware Proxy. It all works great, but there are two things I'm not sure how to accomplish. 1) How can I restrict the…
Furbeenator
  • 8,106
  • 4
  • 46
  • 54
0
votes
1 answer

How to authenticate with web services on App Engine

I have a RESTful service running on GCP's App Engine which is secured by IAP. I'd like to invoke those methods from a web app but not sure how to set up authentication. The web app is written in TypeScript / Angular. Any guidance/examples would be…
Dandan
  • 519
  • 2
  • 9
0
votes
1 answer

Can you combine the App Engine firewall with IAP? (OR not AND)

Is it possible to set up App Engine so that access to the application is granted to a requester that is: - Either on the App Engine firewall IP address whitelist (ie, with no authentication) - Or authenticated using Identity-Aware Proxy ? In other…
kennethmac2000
  • 1,281
  • 2
  • 10
  • 7
0
votes
2 answers

Problems using Cloud IAP Special URLs after login in SPA

I've been using Google Cloud IAP to protect my web apps under https://some-domain. However, I found a problem when accessing Cloud IAP special urls with nginx + static SPA. I found that if I wasn't logged in, I was able to access the special urls…
dekauliya
  • 1,303
  • 2
  • 15
  • 26
0
votes
1 answer

Djangae AppEngine misbehaves with IAP

Code that I have used to handle user login and admin login: # if not logged in, divert to login page if users.get_current_user() is None: return redirect('whoami') # if logged in, Check if user is an admin elif not…
Tameem
  • 408
  • 7
  • 19
0
votes
1 answer

How to get a cron job running in Flexible GAE

I am working on my first app. I chose to go with the Flexible Python environment interacting with DataTables. I have the app working and it is secured with Identity-Aware Proxy to limit access to our company domain. I am now trying to deploy a cron…
0
votes
1 answer

GAE with IAP (Identity Aware Proxy) and mail inboundservice

I have a Java appengine standard project which handle incoming mails via activated inbound-service with out any problems. If I configure and activate the IAP (identity aware proxy) the appengine projects still works fine with out any problems. But…
Dev Moerker
  • 111
  • 6
0
votes
1 answer

Google IAP Public Keys Expiry?

This page provides public keys to decrypt headers from Google's Identity Aware Proxy. Making a request to the page provides its own set of headers, one of which is Expires (it contains a datetime). What does the expiration date actually mean? I…
0
votes
1 answer

Connecting to IAP (Identity Aware Proxy) protected service with PHP and Service Account

How to connect to an IAP protected service with PHP via Service Account? I already fail to get the Authentication Bearer, so I guess I'm completely on the wrong track:
user1737246
  • 124
  • 1
  • 1
  • 8
0
votes
1 answer

How to add Google IAP (Identity Aware Proxy) resources?

I am testing Google IAP on an Appengine project. This project consit of 3 services (formerly known as modules). Each one represent an environment (default is dev, staging and prod). My problem is that only one resource is listed in the IAP…
-1
votes
1 answer

how get jwt token from IAP in Flask?

I have a simple Flask application on a Google App Engine, protected by Identity-Aware Proxy. The authentication works well but I only recover the GCP_IAP_UID cookie, when I want to recover the JWT found in GCP_IAAP_AUTH_TOKEN_XXXXX. I have…
spopoff
  • 1
  • 3
1 2 3
8
9