frontend - How I check that an api call to an appengine instance came from a Google Compute Engine instance? -
we using google compute engine instance generate convert datastore tables large downloadable csv files. want instance log errors app engine front end instance calling:
/api/log
but want sure call came google compute engine instance has authority write log. how can check api call came google compute engine instance?
it depends on how secure want be. simplest solution include parameter in post request backend , front-end instances recognize - random sequence of characters trick. next level use secret key encrypt contents of request - there many implementations depending on language use.
this approach more flexible too, if decide, example, move backend app engine compute engine.
Comments
Post a Comment