search

awslabs / aws-saas-boost

AWS SaaS Boost is a ready-to-use toolset that removes the complexity of successfully running SaaS workloads in the AWS cloud.
Apache License 2.0
961 stars 189 forks source link

Replace the built-in API Gateway Cognito authorizer with a Lambda Authorizer #368

Closed brtrvn closed 2 years ago

brtrvn commented 2 years ago

Custom Lambda authorizer that does the exact same thing the built-in API Gateway Cognito authorizer does in preparation for supporting different identity providers for API authorization.

This PR also removes the unused Cognito Identity Pool as well as the unused Cognito OAuth scopes. Include the Bearer prefix in the HTTP authorization header to match the OAuth spec and differentiate from other types of authorization.

Co-authored-by: amliuyong yonmzn@amazon.com

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license