kaihendry / vue-aws

Making trusted AWS calls from VueJS
https://vuestatic.dabase.com
12 stars 0 forks source link
authentication aws jamstack vuejs

Goal

Using AWS services from VueJS whilst authenticated from the browser. No back-end like Internal Github login used.

Uses dynamic imports to avoid Webpack hell, however this sadly doesn't work in Firefox without some hoop jumping.

Cons

Once associating the domain with the role, you can't really do fine grained access user by user since each user would effectively have the same permissions and the code is all run in the front end. Be wary that a user can effectively set a break point and change your code to leverage what permissions they have.

Authentication setup

Google Client ID for Web application Trust relasonship
  1. https://console.developers.google.com/apis/credentials?project=vue-aws
  2. https://console.aws.amazon.com/iam/home?region=ap-southeast-1#roles/vueaws

A note about limiting it to your (company's) Google Apps domain.