Interesting security bug in Google Cloud's IAP, from 2021. Since fixed.<p><a href="https://cloud.google.com/iap/docs/concepts-overview" rel="nofollow">https://cloud.google.com/iap/docs/concepts-overview</a>