Open urluba opened 5 years ago
I ran into this issue today as well. I noticed troposphere already supports this feature, so it was only a matter of making it configurable through the zappa_settings.
Do we know when the fix for this issue will be merged into master?
Why hasn't this been merged?
Context
When using Cognito, API Gateway provides the authorizationScopes property on the API Gateway Method to match against scopes in the access token.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-method.html#cfn-apigateway-method-authorizationscopes
Expected Behavior
Using a COGNITO_USERS_POOLS, we should be able to provide a list of scopes. By example:
Actual Behavior
All invocations are not authorized as no matching scopes are found
Possible Fix
Enrich the CFN template with the AutorizationScopes attributes
Steps to Reproduce
N/A
Your Environment
N/A