Authenticating service-to-service calls with Google Cloud Endpoints (Google Cloud Next '17)