如何在启用身份验证的情况下将 reactJS 应用程序与 Google Cloud Functions 和 Cloud Run 集成？

Question

I'm developing a reactJS app that will run in browser. I want to make request from that app to services deployed in Google Cloud Run and Google Cloud Functions, both with authentication enabled, but I don't know how to authenticate requests.

I have a Service Account credentials with permissions to invoke those services but I cannot use default credentials due to reactJS environment variables names and I cannot use the NodeJS Google Cloud SDK.

How can I authenticate request to Cloud Functions/Cloud Run from reactJS apps outside of Google Cloud?

Answer 1

You have to use client side authentication mechanism. Firebase Auth works very well, and you have the Google Cloud version name Google Identity Platform .

---

EDIT 1

If your user aren't authenticated, you can't use authentication services. You should want to limit the access, the cost, the abuse of your Cloud Functions and Cloud Run services. For that, you need to use an API Gateway , such as Google Cloud API Gateway, or a more entreprise grade with APIGee .

You can also use a HTTPS Load Balancer in front of Cloud Functions or Cloud Run and activate Cloud Armor to prevent attacks on your service (but it's not a rate limit).