CODEWITHSUNDEEP

google-cloud-endpoints

Reputation: 444

How to grant access to a defined set of endpoints to an api key

Background

I'm looking at using Google Cloud Endpoints to specify public endpoints on a Kubernetes cluster.

I'm able to create an API key that can access endpoints, and manually specify which endpoints can access an user.

Is there a way to have a "class" of API keys that get access to the same endpoints? Is there a better way?

2 use cases to support

When enabling a new client they should have access to all our public endpoints.

When adding a new public endpoint, it should be applied to all existing keys.

Upvotes: 2

Views: 216

Answers (1)

Mangu

Reputation: 3325

It depends on what are you using:

With gRPC, all API methods require an API key to access them, so, a new API key/client will have access to already existing endpoints. If you later add a new endpoint, all previous existing keys will have access to it.
With OpenAPI, you can restrict access to your methods in a similar manner.

Upvotes: 1

Related Questions