Questions tagged [aws-jwt-authorizer]

16 questions
5
votes
2 answers

AWS authorizer returns 500, message: null, with AuthorizerConfigurationException error in response

I've spent the better part of today trying to make authorizers work, I've checked multiple examples and they all seem to be doing the same thing my code does. I use serverless framework here's the authorization code: exports.handler = function…
3
votes
1 answer

Will JWT authorizer in aws HTTP API gateway cache Public key to avoid repeated call to Authorisation server

Will JWT authorizer in aws HTTP API gateway cache Public key to avoid repeated call to Authorisation server ?
2
votes
0 answers

Pass AWS authorizer policy context values to .net 6 minimal api

I have a scenario where I need to send custom headers from the API gateway after successfully authorized using lambda authorizer. From the authorizer, I will be sending the JSON policy return with the context JSON key-value pair as below. { …
1
vote
1 answer

AWS Lambda Authorizer Missing from Method Request: Authorization options

This is my first run at the lambda jwt-authorizer so it is probably something quite trivial but... I have tested the lambda authorizer both in AWS Lambda and in API Gateway Authorisers test rig. Both tests are successful but when I try to secure the…
1
vote
3 answers

secure aws s3 objects (control access with authorizer like jwt, how a web app would normally do)

I need to secure my s3 bucket objects. In my web application I'm using aws-sdk to upload media to s3 bucket and get an http link back to access that object. This http link is public by default and I want to make it secure so that only authorized…
1
vote
1 answer

AWS Cognito and Websocket Api using Lambda Authorizer

I am having trouble trying to set up a lambda authorizations for a WebSocket API. Serverless.yml functions: sample-web-socket-authorizer: iamRoleStatementsName: stack-${opt:stage}-web-socket-authorizer iamRoleStatementsInherit: true …
1
vote
0 answers

AWS JWT-Authorizer not supporting "any" audience

It seems to me that the JWT-authorizer in a HTTP-api on AWS API-Gateway does not support adding "any client" as allowed audience. This becomes a pain if you want to use it for an API where clients get added removed a lot. Am I missing something (an…
David Karlsson
  • 9,396
  • 9
  • 58
  • 103
1
vote
1 answer

AWS JWT authorizer not supporting google issuer

the issuer in the tokens from google is: "accounts.google.com" but the jwt-authorizer config requires an issuer url with "https://" in front That means the google tokens never be accepted by the authorizer since the token iss claim is missing:…
0
votes
0 answers

How to point identity source of authorizer lambda to a cookie?

I have authorizer lambda that I want its identity source to be a cookie, how can I achieve this? I want to point it to a specific cookie because I don't want to pass the authorization token in a header because that means I'll have to allow my client…
0
votes
0 answers

AWS EC2 using Wpguppy plugin for real time chat

I testing AWS EC2. I am beginner. I want to install wpguppy plugin for real time chat. But wpguppy plugin need root access. Hoo, i don't know how. I need ubuntu,apache,mysql,php,phpmyadmin to install it. Now i testing free at AWS EC2 free tier…
0
votes
0 answers

How to configure cognito authorizer on API Gateway V2?

on AWS API Gateway V1, when creating an Authorizer there're two options (Lambda and Cognito), and when choosing Cognito you just need to define the user pool (from a list) and the Token Source (usually the word "Authorization"). This way, in…
0
votes
0 answers

AWS API Gateway - Using custom API endpoint for authorization running always on an EC2 instance

We are planning on setting up an AWS API Gateway. We also have a requirement that every call that hits our API gateway should go through a JWT token validation. We are using Okta as our IDP which will generate an access token. We tried AWS REST API…
0
votes
2 answers

HTTP API Gateway - How to map authorizer to route in Terraform?

In console, you have to "attach" the authorizer to a route. How is this achieved in TF?
0
votes
0 answers

API Gateway with CUSTOM authorizer and Usage plan at the same time?

I have an issue with API Gateway (REST API) which use authorizer Lambda and usage plan at the same time. The issue what I'm facing is there are two methods, lets call "A" and "B". "A" method is using API key for protection, so you need to pass the…
0
votes
2 answers

Cognito User Pool Authorizer defined in openapi without hardcoded values

I have a API Gateway Rest Api resource defined with this template: AWSTemplateFormatVersion: '2010-09-09' Description: "Api gateway" Resources: ApiGateway: Type: "AWS::ApiGateway::RestApi" Properties: BodyS3Location:…
1
2