Assigned
Status Update
No update yet.
Comments
mo...@gmail.com
Thanks for the explanation.
Do you mean that I have to deploy the back-end and front-end into two different projects?
According to the last two lines (Furthermore, ....etc), how could we do that?
Do you mean that I have to deploy the back-end and front-end into two different projects?
According to the last two lines (Furthermore, ....etc), how could we do that?
ea...@google.com
co...@topper.wku.edu
This is absolutely an issue for my project as well. There's no way to cut out parts of the API that customers should never be hitting.
ma...@gmail.com
I'm facing the same issue. I have a code that have multiple API's that need to make HTTP request to a central service that handles the organization management (add or removing projects, folders, etc), but I'm not having success with it.
ni...@inforintelligence.com
+1
I have certain resources on App Engine which should only be accessible via Cloud Tasks while other services are supposed to be public at the same time.
I have certain resources on App Engine which should only be accessible via Cloud Tasks while other services are supposed to be public at the same time.
gr...@gmail.com
This seems like a duplicate of
ma...@gmail.com
Any news on this? Just discovered this problem, really hoping a solution is in the works
[Deleted User] <[Deleted User]>
Any news? Restricting access to specific service is very needed feature
Description
This would be useful to protect a backend service from unintended use by blocking any incoming requests that are not from a specific frontend service/a service in the same project/a service. This will reduce App Engine usage costs, development costs and help in speeding up the configuration process.
A workaround is to deploy the backend service to a project where the GAE Firewall rules prevent any requests except the other GAE services or to check that the requests are coming from the right service by adding an additional payload to the request.
Furthermore, an ability to target a specific service or a group of services as the only permitted to access the backend service would further improve all the mentioned above.