Support optional authentication and not require JWT [186604016]

Feature Request

Status Update

No update yet.

Description

ba...@google.com

created issue #1

Apr 28, 2021 06:36AM

Config always fails if there is no JWT on the header. "To authenticate a user, a client application must send a JSON Web Token (JWT) in the authorization header of the HTTP request to your backend API."

https://cloud.google.com/api-gateway/docs/authenticating-users-auth0

set up is for an e-commerce site: Cloud Function running GraphQL API
API Gateway in front of Cloud Function, which performs auth through JWT.

It would be a good performance benefit to optionally do JWT auth and to do it at the gateway level, to
simplify Cloud Function, as well as be able to optimize performance with caching.

More info here:

https://stackoverflow.com/questions/67248207/configure-google-cloud-api-gateway-for-optional-authenticated-with-jwt-and-unau

Comments

ba...@google.com <ba...@google.com> #2Apr 28, 2021 06:38AM

Hello,

Thank you for reaching out to us!

I tried to reproduce this issue at my end. However, I am getting the intended behavior. Please check the official documentation referring configuration for the Oauth ClientID for Web applications.Also I would suggest you have a look at the validation rules for Authorized JavaScript origin mentioned.

Please let me know if that helped you with your use case and if there is anything else you would need assistance with.

Thank you

Issue 186604016

Description

Issue summary

Comments

ba...@google.com <ba...@google.com> #2Apr 28, 2021 06:38AM

Add comment

Issue metadata