401 Jwt issuer is not configured

1,338 views
Skip to first unread message

Wenzhe Gao

unread,
Oct 13, 2020, 5:00:30 PM10/13/20
to Google Cloud Endpoints
Hi,

I'm getting 401 "Jwt issuer is not configured" when trying to set up Endpoints with custom JWK authentication for a gRPC backend deployed on Cloud Run. Authentication via service accounts and google ID tokens do work.

Custom authentication is working for a different ESPv2 endpoints gateway with Cloud Functions backends. We're trying to using the same jwks_uri and setting the same claims, but removing the "x-google-" prefixes to jwks_uri, issuer, audiences in the endpoints configuration for gRPC.

Any ideas on how to make custom authentication work for Cloud Endpoints with gRPC backend? Thanks

Wayne Zhang

unread,
Oct 13, 2020, 5:13:21 PM10/13/20
to Wenzhe Gao, Google Cloud Endpoints
You need to configure jwt auth in this config proto

There is a short cut for you.  Since you have an openapi spec for Cloud Function working.  You can get its config by "gcloud endpoints configs describe CONFIG_ID --service=SERVICE".  
You can copy its Authentication rules to your gRPC endpoint configuration.

Thanks
-Wayne

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endp...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/67efd950-6fe7-4e9b-aae6-00ae59f8bacdn%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages