Securely Call Private Google Cloud Run APIs with JWT Auth (Simplified)

This streamlined n8n workflow enables secure access to private Google Cloud Run services without exposing endpoints publicly. It uses a service account for JWT signing, exchanges it for an ID token via Google's OAuth endpoint, and authenticates HTTP requests to your Cloud Run API with a Bearer token. Ideal for developers running custom logic on Cloud Run who need reliable, IAM-secured calls from n8n.

Key benefits include free-tier compatibility, minimal nodes (Set → JWT → HTTP Token Exchange → HTTP Call), and zero caching overhead for quick setup. It eliminates complex auth libraries, VPNs, or API gateways, saving hours on secure integrations.

Use cases: Invoke serverless APIs for data processing, ML inference, or backend tasks from n8n automations. Perfect for IT/security teams building private, scalable services with Google Cloud IAM. Requires a Cloud Run service with auth enabled, service account with Invoker role, and PEM key for JWT credentials. Full guide linked in workflow.