I need a very secure cloud function so I\'m trying to put it behind a API Gateway. The function works fine when I call it directy passing a Bearer token in header: