{"repo":"imkira/gcp-iap-auth","free":true,"listed":false,"github":"https://github.com/imkira/gcp-iap-auth","clone":"git clone https://github.com/imkira/gcp-iap-auth.git","description":"A simple server implementation and package in Go for helping you secure your web apps running on GCP behind a Cloud IAP (Identity-Aware Proxy)","language":"Go","stars":89,"topics":["golang","google","cloud","gcp","iap","proxy","nginx","auth","kubernetes","jwt"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"gcp-iap-auth gcp-iap-auth is a simple server implementation and package in Go for helping you secure your web apps running on GCP behind a Google Cloud Platform's IAP (Identity-Aware Proxy) by validating IAP signed headers in the requests. Why Validating signed headers helps you protect your app from the following kinds of risks: - IAP is accidentally disabled; - Misconfigured firewalls; - Access from within the project. How to use it as a package The following is just an excerpt of the provided simple.go example: For advanced usage, make sure to check the available documentation here. How to use it as a server Binary Releases are provided for convenience. After downloading it, you can execute it like: Construction of the YOUR AUDIENCE string is covered here HTTPS is also supported. Just make sure you give it the cert/key files: It is also possible to use environment variables instead of flags. Just prepend GCP IAP AUTH to the flag name (in CAPS and with - replaced by ) and you're good to go (eg: GCP IAP AUTH AUDIENCES replaces --audiences ) For help, just check usage: How to use it as a reverse proxy In this mode the gcp-iap-auth server runs as a proxy in front of another web app. The JWT header will be checked and requests with a valid header will be passed to the backend, while all other requests will return HTTP error 401. In proxy mode you may optionally specify a header that will be filled with the validated email address from the JWT token. The value will only contain ","default_branch":null,"files":null,"tree":[],"storefront":"/r/imkira","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/imkira/gcp-iap-auth/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}