Ah, great, thanks! And now that you've pointed that out, I see <https://cloud.google.com/tasks/docs/creating-appengine-handlers#reading_request_headers> there is a corresponding way to validate cloudtasks requests: the X-Appengine-Taskname header field.
Thank you again, - Bob On Wednesday, August 28, 2019 at 6:11:33 AM UTC-7, Giuliano Ribeiro wrote: > > I've done this filtering the request headers like described here: > > https://cloud.google.com/appengine/docs/standard/go112/scheduling-jobs-with-cron-yaml#validating_cron_requests > > Requests from the Cron Service will also contain a HTTP header: > > X-Appengine-Cron: true > > > > Giuliano Ribeiro > > > > On Wed, Aug 28, 2019 at 12:52 AM Bob Glickstein <[email protected] > <javascript:>> wrote: > >> I'm using the Go 1.12 standard environment. I have some handlers for >> cron- and cloudtasks-generated requests. How should these handlers ensure >> that requests are coming from my GAE service account? The docs are super >> unclear about this, and many are outdated (still referring to e.g. login: >> admin in app.yaml.) >> >> Thanks in advance! >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Google App Engine" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/google-appengine/360363bf-cdfd-4a1f-b036-5fdba04bd33d%40googlegroups.com >> >> <https://groups.google.com/d/msgid/google-appengine/360363bf-cdfd-4a1f-b036-5fdba04bd33d%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/d544e749-b95a-4e7b-a3c0-1dd94e26ad0b%40googlegroups.com.
