How do I give Retool access to a Cloud Functions endpoint that requires authentication?

[thedmeyer]

I have a solution to the problems outlined above. The magic lies within the scopes granted.

• Authentication: OAuth2.0
• authorization url: Sign in - Google Accounts
• access token url: https://www.googleapis.com/oauth2/v4/token
• client id and client secret following this guide: Creating a Google OAuth 2.0 client
• audience: set this to the client id from above
• access token lifespan: 3600
• Scopes required: https://www.googleapis.com/auth/userinfo.email openid
  For the authorization header be sure to use Bearer OAUTH2_ID_TOKEN

Noting: This works specifically for IAP (identity aware proxy) protected services