Skip to content

Conversation

@taeold
Copy link
Contributor

@taeold taeold commented Jul 25, 2022

One notable change made here is that we generate and include ID tokens in requests to http/callable functions since we aren't allowed to run public functions on internal GCP project

taeold added 2 commits July 25, 2022 16:17
Since we aren't allowed to run public functions on internal GCP project, we pass id tokens when making calls to callable/http functions.
@taeold taeold requested review from Berlioz, colerogers and inlined July 25, 2022 23:23
@taeold taeold merged commit 1877e98 into master Jul 26, 2022
@taeold taeold deleted the dl-cf3-fix-integration-test branch July 26, 2022 22:02
}
const url = `https://${REGION}-${firebaseConfig.projectId}.cloudfunctions.net/${name}`;
const client = await new GoogleAuth().getIdTokenClient(
'32555940559.apps.googleusercontent.com'
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What is this hard-coded project-specific string?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Doing some research, this is the CLI appID? Whatever it is, can't we assume that the default compute service account has invoker permissions and use the ADC?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants