Thanks Eric!

even if we set domain name the audience would look 
like https://{domain_name}/reporter.Reporter. however, the ESP would expect 
the audience to be  "https://reporter.endpoints.{projectid}.cloud.goog";. 
are we missing something here?

Besides the audience problem, we have a bigger issue to make a gRPC client 
on AppEngine. The problem is ManagedChannelBuilder is not supported on 
AppEngine restricted environment. Do you know if 
https://cloud.google.com/endpoints/docs/grpc/transcoding is the right way 
to go. something like we build a HTTP/JSON request on AppEngine to call a 
gRPC backend.

Jun

On Wednesday, August 30, 2017 at 8:30:04 PM UTC+2, Eric Anderson wrote:
>
> On Fri, Aug 25, 2017 at 6:02 AM, julie <[email protected] 
> <javascript:>> wrote:
>
>> So instead of the audience (SERVICE_CONFIGURATION_NAME) that we set, we 
>> are obtaining a string like : https://35.195.24.28:80/reporter.Reporter 
>> <https://www.google.com/url?q=https%3A%2F%2F35.195.24.28%3A80%2Freporter.Reporter&sa=D&sntz=1&usg=AFQjCNGuR9cUicjVE_-ERaOi7bYIdc180A>
>>
>> JWT's audience is set based on the Channel's host. You need to use a 
> hostname instead of an IP address with Channel.forAddress(). Or rather, you 
> need to use the hostname that the server knows itself as (it does a string 
> comparison of the audience it expects and the audience used). Since JWT is 
> expected to be zero-configuration, it automatically computes the audience 
> per-request.
>
> I'll note that overrideAuthority had a bug earlier 
> <https://github.com/grpc/grpc-java/issues/2682> that would have caused a 
> similar error. But that's been fixed.
>

-- 
You received this message because you are subscribed to the Google Groups 
"grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/grpc-io.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/grpc-io/892caf72-fd15-4e32-9da8-4e8dcae1bff2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to