-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support for custom authorizer in Swagger definition #223
Comments
@sapessi Anyone actively working on that? Any help needed? |
@ericofusco I am not aware of anyone working on this currently. Contributions are always welcome. :) Calling the cloud function could difficult currently. SAM CLI does not yet resolve Fn:Sub intrinsic functions. We may be able to extract the function name and assume we are in the account and region specified but full ARNs won't be possible to support yet. This issue was originally created before SAM supported Custom Authorizers, so it's worth considering starting from local execution first and then expand to the cloud if needed. The best place to start would be to do a quick write up, full design isn't probably needed. This will help orient/align us before getting deep into code. Happy to talk more on the #samdev channel as well. |
Thanks @jfuss. I'll reach out on #samdev to get this started. |
So is it currently impossible to execute an API Gateway locally with authorizer and lambda proxy integration? |
My testing seems to bear this out. As far as I can tell using the |
SAM doesn't support custom authorizers when you run locally now (SAM version 0.48). So you can't test it by using "sam local start-api". But it supports in SAM YAML template and you can use SAM CLI to build and deploy custom authorizers to you AWS cloud Api Gateway. It can work well if your YAML setup is correct. |
This is a duplicate of #137. Closing |
|
Implement support for the execution of custom authorizers when defined in the API swagger template. The implementation should at least run the authorizer function, capture the output template, and verify that the request is allowed. Context variables returned by the authorizer should be injected in the context.
The text was updated successfully, but these errors were encountered: