Google Cloud Run functions

KPN Things: Configure a Google Cloud Run functions destination

Name

Give your Google Cloud Run functions Destination a name and optionally a description.

• Destination name (required) - the administrative name of your Destination.

  Technical name: name

  Example value: Tenant Z

• Description - an administrative description of your Destination.

  Technical name: description

  Example value: Send my data to Google Cloud for further data processing

Connection details

First you need to create a Google Cloud account on https://cloud.google.com, or use an existing Google Cloud account. Then follow the instructions below to create an integration in your Google Cloud account. Keep your KPN Things Destination configuration screen open, as you will need to copy information from and to it later.

Google Cloud: Create an integration

Log in to your Google Cloud account and go to Console. Then select the project of your choice and from there select the Cloud Run Product.

From the Cloud Run menu select the option Write a Function

The following form is presented.

1. Basic information

In the first step, enter the following information.

• Service name Enter a name that describes the purpose of your function.

• Runtime Choose the language to use to write your function. For this example Python 3.10 is chosen.

• Authentication

  Choose the authentication type. For this example, Allow unauthenticated invocations.

All other setting can be left to default.

Click Create .

2. Code

Select the Source tab to define your code. The screenshot below contains example code.

Click Save and Redeploy

KPN Things: Continue with Configure a Google Cloud Run functions destination

In this step, you need to copy/paste information from Google Cloud to Things. So pay attention, please.

Go back to the KPN Things Destination configuration screen and fill the remain fields.

• HTTP endpoint URL Copy the Function URL from Google Cloud into the KPN Things Destination configuration.

• Shared secret With the shared secret you have the possibility to verify that Things has sent the data and not someone else, because with the shared secret a unique Things Message Token is calculated for each message. Within the Google Cloud Run function you can repeat the calculation and check whether the calculated Things-Message-Token is the same as the received Things-Message-Token. Below you can find an example of a calculation and a check in Python.

import functions_framework
import hashlib
import json

@functions_framework.http
def hello_http(request):
    # This is an example.
    # Make sure you store the sharedSecret in a safe place,
    
    requestBody = request.get_json(silent=True)
    sharedSecret='[Fill in your shared secret]'
    thingsMessageToken = request.headers.get('Things-Message-Token')
    input = json.dumps(requestBody) + sharedSecret
 
    def calculate_sha256(data):
    # Convert data to bytes if it’s not already
        if isinstance(data, str):
            data = data.encode()
        # Calculate SHA-256 hash
        sha256_hash = hashlib.sha256(data).hexdigest()
        return sha256_hash

    if thingsMessageToken == calculate_sha256(input):
    # Define further action
        return {
            'statusCode': 201,
        }
    else:
        return {
            'statusCode': 401,

        }

```

Finally, go back to the KPN Things Destination configuration screen and press the Add Google Cloud Run functions destination button to save the new destination in KPN Things.

Now you are finished and good to go!