GarupanOjisan GarupanOjisan

## verify_jwt.go
func verifyJWT(publicKeyPath string, token string) (bool, error) {
	t, err := jwt.Parse(token, func(token *jwt.Token) (i interface{}, err error) {
		if token.Method != (jwt.SigningMethodRS256) {
			return nil, fmt.Errorf("invalid signing method")
		}
		verifyBytes, err := ioutil.ReadFile(publicKeyPath)
		if err != nil {
			return nil, err
		}
		return jwt.ParseRSAPublicKeyFromPEM(verifyBytes)

## jwt_signing.go
func createJWT(privateKeyPath string, algorithm string, expiration time.Duration) (string, error) {
	claims := jwt.StandardClaims{
		Audience:  "example",
		ExpiresAt: time.Now().Add(expiration).Unix(),
		IssuedAt:  time.Now().Unix(),
	}

	keyBytes, err := ioutil.ReadFile(privateKeyPath)
	if err != nil {
		return "", err

## gist:9b067c39bedab0e53c97087abc382f2a
grpcurl -plaintext -proto=./proto/user.proto -d '{"id": 1}' <SERVICE EXTERNAL IP>:80 user.UserService/Get

## k_apply.sh
kubectl apply -f ./kubernetes

## deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: grpc-example
spec:
  replicas: 1
  template:
    metadata:
      labels:
        app: grpc-example

## service.yaml
apiVersion: v1
kind: Service
metadata:
  name: grpc-example
spec:
  ports:
    - port: 80
      targetPort: 9000
      protocol: TCP
      name: http2

## build_and_push_gcr.sh
docker build -t grpc-example:v0.0.1 -f ./docker/Dockerfile .
docker tag grpc-example:v0.0.1 asia.gcr.io/<YOUR PROJECT_ID>/grpc-example:v0.0.1
docker push asia.gcr.io/<YOUR PROJECT_ID>/grpc-example:v0.0.1

## deploy_cloudendponts_grpc-example.sh
gcloud endpoints services deploy ./api_config.yaml ./proto/user.pb

## api_config.yaml
type: google.api.Service
config_version: 3

name: user.endpoints.<YOUR PROJECT_ID>.cloud.goog

apis:
  - name: user.UserService

usage:
  rules:

## create_user.pb.sh
protoc --go_out=plugins=grpc:. ./proto/user.proto --descriptor_set_out=./proto/user.pb
	func verifyJWT(publicKeyPath string, token string) (bool, error) {
	t, err := jwt.Parse(token, func(token *jwt.Token) (i interface{}, err error) {
	if token.Method != (jwt.SigningMethodRS256) {
	return nil, fmt.Errorf("invalid signing method")
	}
	verifyBytes, err := ioutil.ReadFile(publicKeyPath)
	if err != nil {
	return nil, err
	}
	return jwt.ParseRSAPublicKeyFromPEM(verifyBytes)
	func createJWT(privateKeyPath string, algorithm string, expiration time.Duration) (string, error) {
	claims := jwt.StandardClaims{
	Audience: "example",
	ExpiresAt: time.Now().Add(expiration).Unix(),
	IssuedAt: time.Now().Unix(),
	}

	keyBytes, err := ioutil.ReadFile(privateKeyPath)
	if err != nil {
	return "", err
	apiVersion: apps/v1
	kind: Deployment
	metadata:
	name: grpc-example
	spec:
	replicas: 1
	template:
	metadata:
	labels:
	app: grpc-example
	apiVersion: v1
	kind: Service
	metadata:
	name: grpc-example
	spec:
	ports:
	- port: 80
	targetPort: 9000
	protocol: TCP
	name: http2
	docker build -t grpc-example:v0.0.1 -f ./docker/Dockerfile .
	docker tag grpc-example:v0.0.1 asia.gcr.io/<YOUR PROJECT_ID>/grpc-example:v0.0.1
	docker push asia.gcr.io/<YOUR PROJECT_ID>/grpc-example:v0.0.1
	type: google.api.Service
	config_version: 3

	name: user.endpoints.<YOUR PROJECT_ID>.cloud.goog

	apis:
	- name: user.UserService

	usage:
	rules: