DEV Community

Discussion on: GCP Api Gateway: Firebase Authentication

Collapse
 
chengchinlim profile image
Cheng Chin Lim

Hi, if the requests are unauthenticated, will they still be passed to our services (App Engine)? I am afraid of getting a huge bill due to DDOS attack. Thank you.

Collapse
 
amammay profile image
Alex Mammay

The requests will not be forwarded to the target endpoint if the auth is missing (as long as you have auth strictly defined within your open api spec).