Does OAuth always use the HTTP Authorization header?











up vote
1
down vote

favorite
1












Have an app running in GCP using App Engine and secured by IAP. To the best of my knowledge IAP uses OAuth, but when I open the app in the browser and inspect the outgoing XHR requests I don't see the HTTP Authorization header on any of them. There does appear to be a token in the cookies though, something named GCP_IAAP_AUTH_TOKEN.
Just wondering if this is still considered OAuth or is it some other form of authentication?






oauth google-cloud-platform







share|improve this question


























    up vote
    1
    down vote

    favorite
    1












    Have an app running in GCP using App Engine and secured by IAP. To the best of my knowledge IAP uses OAuth, but when I open the app in the browser and inspect the outgoing XHR requests I don't see the HTTP Authorization header on any of them. There does appear to be a token in the cookies though, something named GCP_IAAP_AUTH_TOKEN.
    Just wondering if this is still considered OAuth or is it some other form of authentication?






    oauth google-cloud-platform







    share|improve this question
























      up vote
      1
      down vote

      favorite
      1









      up vote
      1
      down vote

      favorite
      1






      1





      Have an app running in GCP using App Engine and secured by IAP. To the best of my knowledge IAP uses OAuth, but when I open the app in the browser and inspect the outgoing XHR requests I don't see the HTTP Authorization header on any of them. There does appear to be a token in the cookies though, something named GCP_IAAP_AUTH_TOKEN.
      Just wondering if this is still considered OAuth or is it some other form of authentication?






      oauth google-cloud-platform







      share|improve this question













      Have an app running in GCP using App Engine and secured by IAP. To the best of my knowledge IAP uses OAuth, but when I open the app in the browser and inspect the outgoing XHR requests I don't see the HTTP Authorization header on any of them. There does appear to be a token in the cookies though, something named GCP_IAAP_AUTH_TOKEN.
      Just wondering if this is still considered OAuth or is it some other form of authentication?






      oauth google-cloud-platform




      oauth google-cloud-platform






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 7 at 18:27









      Dandan

      1808




      1808
























          1 Answer
          1






          active

          oldest

          votes

















          up vote
          0
          down vote



          accepted










          Cloud IAP can use either the cookie GCP_IAAP_AUTH_TOKEN or Authorization: Bearer. Both are derived from OAuth2.




          The credential that Cloud IAP relies on is an OpenID Connect (OIDC)
          token. That token can come from either a cookie GCP_IAAP_AUTH_TOKEN
          or an Authorization: bearer header.




          Authenticating with OpenID Connect






          share|improve this answer





















          • Thanks. Do you know by any chance what scope I should specify for authenticating?
            – Dandan
            Nov 8 at 18:30










          • It depends on what permissions you need. To get started use https://www.googleapis.com/auth/cloud-platform. Reference: developers.google.com/identity/protocols/googlescopes
            – John Hanley
            Nov 8 at 18:34










          • Thanks! One other question, do you know if it'd be possible to use the Google API Client libraries to invoke it programmaticly?
            – Dandan
            Nov 8 at 23:50










          • Here are some how-to guides to get you started cloud.google.com/iap/docs/how-to
            – John Hanley
            Nov 8 at 23:54











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














           

          draft saved


          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53195590%2fdoes-oauth-always-use-the-http-authorization-header%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          1 Answer
          1






          active

          oldest

          votes








          1 Answer
          1






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          up vote
          0
          down vote



          accepted










          Cloud IAP can use either the cookie GCP_IAAP_AUTH_TOKEN or Authorization: Bearer. Both are derived from OAuth2.




          The credential that Cloud IAP relies on is an OpenID Connect (OIDC)
          token. That token can come from either a cookie GCP_IAAP_AUTH_TOKEN
          or an Authorization: bearer header.




          Authenticating with OpenID Connect






          share|improve this answer





















          • Thanks. Do you know by any chance what scope I should specify for authenticating?
            – Dandan
            Nov 8 at 18:30










          • It depends on what permissions you need. To get started use https://www.googleapis.com/auth/cloud-platform. Reference: developers.google.com/identity/protocols/googlescopes
            – John Hanley
            Nov 8 at 18:34










          • Thanks! One other question, do you know if it'd be possible to use the Google API Client libraries to invoke it programmaticly?
            – Dandan
            Nov 8 at 23:50










          • Here are some how-to guides to get you started cloud.google.com/iap/docs/how-to
            – John Hanley
            Nov 8 at 23:54















          up vote
          0
          down vote



          accepted










          Cloud IAP can use either the cookie GCP_IAAP_AUTH_TOKEN or Authorization: Bearer. Both are derived from OAuth2.




          The credential that Cloud IAP relies on is an OpenID Connect (OIDC)
          token. That token can come from either a cookie GCP_IAAP_AUTH_TOKEN
          or an Authorization: bearer header.




          Authenticating with OpenID Connect






          share|improve this answer





















          • Thanks. Do you know by any chance what scope I should specify for authenticating?
            – Dandan
            Nov 8 at 18:30










          • It depends on what permissions you need. To get started use https://www.googleapis.com/auth/cloud-platform. Reference: developers.google.com/identity/protocols/googlescopes
            – John Hanley
            Nov 8 at 18:34










          • Thanks! One other question, do you know if it'd be possible to use the Google API Client libraries to invoke it programmaticly?
            – Dandan
            Nov 8 at 23:50










          • Here are some how-to guides to get you started cloud.google.com/iap/docs/how-to
            – John Hanley
            Nov 8 at 23:54













          up vote
          0
          down vote



          accepted







          up vote
          0
          down vote



          accepted






          Cloud IAP can use either the cookie GCP_IAAP_AUTH_TOKEN or Authorization: Bearer. Both are derived from OAuth2.




          The credential that Cloud IAP relies on is an OpenID Connect (OIDC)
          token. That token can come from either a cookie GCP_IAAP_AUTH_TOKEN
          or an Authorization: bearer header.




          Authenticating with OpenID Connect






          share|improve this answer












          Cloud IAP can use either the cookie GCP_IAAP_AUTH_TOKEN or Authorization: Bearer. Both are derived from OAuth2.




          The credential that Cloud IAP relies on is an OpenID Connect (OIDC)
          token. That token can come from either a cookie GCP_IAAP_AUTH_TOKEN
          or an Authorization: bearer header.




          Authenticating with OpenID Connect







          share|improve this answer












          share|improve this answer



          share|improve this answer










          answered Nov 7 at 19:14









          John Hanley

          11.1k2527




          11.1k2527












          • Thanks. Do you know by any chance what scope I should specify for authenticating?
            – Dandan
            Nov 8 at 18:30










          • It depends on what permissions you need. To get started use https://www.googleapis.com/auth/cloud-platform. Reference: developers.google.com/identity/protocols/googlescopes
            – John Hanley
            Nov 8 at 18:34










          • Thanks! One other question, do you know if it'd be possible to use the Google API Client libraries to invoke it programmaticly?
            – Dandan
            Nov 8 at 23:50










          • Here are some how-to guides to get you started cloud.google.com/iap/docs/how-to
            – John Hanley
            Nov 8 at 23:54


















          • Thanks. Do you know by any chance what scope I should specify for authenticating?
            – Dandan
            Nov 8 at 18:30










          • It depends on what permissions you need. To get started use https://www.googleapis.com/auth/cloud-platform. Reference: developers.google.com/identity/protocols/googlescopes
            – John Hanley
            Nov 8 at 18:34










          • Thanks! One other question, do you know if it'd be possible to use the Google API Client libraries to invoke it programmaticly?
            – Dandan
            Nov 8 at 23:50










          • Here are some how-to guides to get you started cloud.google.com/iap/docs/how-to
            – John Hanley
            Nov 8 at 23:54
















          Thanks. Do you know by any chance what scope I should specify for authenticating?
          – Dandan
          Nov 8 at 18:30




          Thanks. Do you know by any chance what scope I should specify for authenticating?
          – Dandan
          Nov 8 at 18:30












          It depends on what permissions you need. To get started use https://www.googleapis.com/auth/cloud-platform. Reference: developers.google.com/identity/protocols/googlescopes
          – John Hanley
          Nov 8 at 18:34




          It depends on what permissions you need. To get started use https://www.googleapis.com/auth/cloud-platform. Reference: developers.google.com/identity/protocols/googlescopes
          – John Hanley
          Nov 8 at 18:34












          Thanks! One other question, do you know if it'd be possible to use the Google API Client libraries to invoke it programmaticly?
          – Dandan
          Nov 8 at 23:50




          Thanks! One other question, do you know if it'd be possible to use the Google API Client libraries to invoke it programmaticly?
          – Dandan
          Nov 8 at 23:50












          Here are some how-to guides to get you started cloud.google.com/iap/docs/how-to
          – John Hanley
          Nov 8 at 23:54




          Here are some how-to guides to get you started cloud.google.com/iap/docs/how-to
          – John Hanley
          Nov 8 at 23:54


















           

          draft saved


          draft discarded



















































           


          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53195590%2fdoes-oauth-always-use-the-http-authorization-header%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          -

          這個網誌中的熱門文章

          Hercules Kyvelos

          圖片
          Hercules Kyvelos Statistics Real name Hercules Kyvelos Nickname(s) The God Weight(s) Middleweight Light Middleweight Welterweight Height 5 ft 10 in (180 cm) Reach 72 in (183 cm) Nationality Canadian Born ( 1975-02-25 ) February 25, 1975 (age 43) Montreal, Quebec Stance Orthodox Boxing record Total fights 27 Wins 24 Wins by KO 12 Losses 3 Draws 0 No contests 0 Hercules Kyvelos Medal record Men's Boxing Representing   Canada Pan American Games 1995 Mar del Plata Welterweight Hercules Kyvelos (born February 25, 1975) is a Greek-Canadian boxer in the Welterweight division and is the former Canadian Welterweight Champion. [1] He fought at the 1996 Summer Olympics in Atlanta, Georgia. Contents 1 Early life 2 Amateur career 3 Pro career 3.1 WBO Welterweight Championship 3.2 Personal life 4 References 5 External links Early life Hercules was born in
          閱讀完整內容

          Tangent Lines Diagram Along Smooth Curve

          圖片
          7 1 I am trying to replicate a diagram and have a minimal example. I don't know how to add additional tangents between the specified points and preserve smoothness. documentclass{article} usepackage{tikz} usetikzlibrary{calc,intersections} begin{document} begin{tikzpicture} % Axes draw [->, name path=x] (-1,0) -- (11,0) node [right] {$x$}; draw [->] (0,-1) -- (0,6) node [above] {$y$}; % Origin node at (0,0) [below left] {$0$}; % Points coordinate (start) at (1,-0.8); coordinate (c1) at (3,3); coordinate (c2) at (5.5,1.5); coordinate (c3) at (8,4); coordinate (end) at (10.5,-0.8); % show the points foreach n in {start,c1,c2,c3,end} fill [black] (n) circle (2pt) node [below] {}; % join the coordinates draw [thick,name path=curve] (start) to[out=70,in=180] (c1) to[out=0,in=180]
          閱讀完整內容

          Yusuf al-Mu'taman ibn Hud

          圖片
          Main article: Taifa of Zaragoza Al-Mu'taman Ruler of Zaragoza Reign 1081–1085 Predecessor Ahmad al-Muqtadir Successor Al-Mustain II Born Zaragoza Died 1085 Full name Yusuf ibn Ahmad al-Mu'taman ibn Hūd House Banu Hud Yusuf ibn Ahmad al-Mu'taman ibn Hūd (Arabic: المؤتمن بالله يوسف إبن أحمد إبن هود ‎, al-Mutaman bi l-Lah , died c. 1085) was the third king of the Banu Hud dynasty who ruled over the Taifa of Zaragoza from 1081 to 1085. Yusuf al-Mutaman reigned during the height of power of Muslim Zaragoza , following the thriving period of his father Ahmad al-Muqtadir. He continued his father's efforts and created around him a court of intellectuals, living in the beautiful palace of Aljafería, nicknamed as "the palace of joy". Al-Mu'taman was also a scholarly king and a patron of science, philosophy and arts. As an example of a wise king, he knew astrology, philosophy, and especially mathematics, a discipline in which
          閱讀完整內容