mirror of
https://github.com/google/nomulus
synced 2026-01-07 22:15:30 +00:00
This can happen on public endpoints (in pubapi) where the service is behind IAP but all users (including not-logged-in ones) are allowed. IAP will add an OIDC token with no email field in the request header.