gRPC vs REST

gRPC is very similar to REST (Resources, methods and GET/POST representation)

gRPC uses Protocol Buffers.

Protocol Buffers uses binary encoding - as opposed to the JSON used by REST.

What does the Service need to identify?

The service (hosted app) needs to identify the calling application. This is best done via an API key. The trouble is, API keys are inherently insecure.

The service In addition, the service may also need to identify individual users. This is done via an auth token (that can be generated by Firebase or Auth0)

API keys are insecure. How do you add an additional layer of ( USER ) authentication?

Let the user obtain their auth token when they log in to the app. Use this auth token as an additional token to authenticate against the API method.

auth api


Need an experienced AWS/GCP/Azure Professional to help out with your Public Cloud Strategy? Set up a time with Anuj Varma.