I finally managed to deploy container and run on Google Cloud, but all containers run default private and require OAuth tokens. Whats the recommended approach when integrate that server into a client frontend later on, to protect that token. It has to embed some kind of long lived token somewhere. Maybe possible to use Firebase Auth or something?