How do you made Google Cloud Functions only worked when pinged from certain URLS?

Question

I made a Google Cloud function, but it returns data even when I type in the URL in an incognito window. How do I make my Google Cloud functions only available for myWebsite.com or localhost?

Answer 1

This is not possible to fully enforce. When you make an HTTP endpoint, you should expect that it could be accessed from anywhere, and that the access may have headers that do not match what a web browser would normally send.