API Gateway JWT Token authentication

[Princy]

Instead of Apikey I want to add security based on JWT token authentication.

securityDefinitions:

  jwtAuth:

    authorizationUrl: ""

    flow: "implicit"

    type: "oauth2"

    x-google-issuer: "https://securetoken.google.com/PROJECT-ID"

    x-google-jwks_uri: "uri"

    x-google-audiences: "PROJECT-ID"

and in the path with
  -jwtAuth: []

In the request I have to send Authorization: Bearer {token} instead of that I want to add it in idtoken parameter in the header.

How to achieve that?

[jamespatrickm]

Hi @Princy,

Welcome to Google Cloud Community!

Not an expert on this topic but the following documentations might lead you to the right direction:

• Authentication between services
• Using Google ID tokens to authenticate users

Was this helpful? If so, please accept this answer as “Solution”. If you need additional assistance, reply here within 2 business days and I’ll be happy to help.

[Princy]

Thank you for the documentation @jamespatrickm . I reviewed it, but it specifies sending the request with the Authorization header using a Bearer token. However, I need to send the token in the idToken header parameter instead. Since there are hundreds of functions relying on the idToken header for further processing, modifying all of them would require significant effort.