'Is token valication needed if Firebase client requests through GCP API Gateway?

I know it is necessary if it is through AWS API gateway. Since firebase are from google, and from this article, it seems unnecessary.enter image description here I am tossing up between keeping everything within Google or routing via AWS. Thank you.



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source