mirror of
https://github.com/google/nomulus
synced 2026-07-08 09:06:58 +00:00
5180095cb6
This can happen on public endpoints (in pubapi) where the service is behind IAP but all users (including not-logged-in ones) are allowed. IAP will add an OIDC token with no email field in the request header.