Chapter 10: Applying Authentication and Authorization to gRPC Endpoints

Authentication and authorization are very important topics in any type of application development. Almost any public-facing application will have at least some of its functionality restricted to only specific users, as you wouldn't want an anonymous user to gain access to sensitive information.

There are many different types of sensitive information that you would want to restrict access to. Personal information of registered users is one example; so is the history of their personal communication with other users; so is any financial information.

There are many examples of this on the public web. No social media platform would allow you to publish content or contact other users until you have logged in with a username and password. Neither would an online banking app grant you access to the account information without verifying who you are.

Because Google Remote Procedure Call (gRPC) endpoints are...