GoogleCloudPlatform / GoogleCloudPlatform/functions-framework-nodejs
Question: How can one do OIDC token validating using event signature?
未关闭
feature request
P2
- 主要语言
- TypeScript
- 星标
- 1.4k
- 派生
- 181
- PR 合并指标
- 30 天内没有已合并 PR
描述
As per title, if I create a cloudevent handler with signature of event, I do not have access to the headers to validate any OIDC token that I want to validate.
My use-case is for cross-team cross-project PubSub communication so having the OIDC token validation is a nice layer of security, it's easy to do with the http endpoint but I wanted to check if there is a way to do it via Cloudevent so I can also take advantage of the unmarshalling?
贡献指南
调研方向
首先查看 CloudEvent 处理程序签名,并将其与 issue 中描述的 HTTP 端点路径进行比较,重点关注对请求标头的访问。确定在保留 CloudEvent 反序列化的同时是否可以支持 OIDC 令牌验证;issue 未指出文件或测试,因此需要澄清完成标准。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- google-cloud, node.js, typescript
- 领域
- authentication, backend, cloud
- Issue 类型
- 功能
- 难度
- 5/5
- 预计耗时
- 一周以上
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 25/100