septiyanandika / serverless-custom-authorizer

Example of a serverless service that uses API Gateway custom authorizer to authorize your endpoints, and can custom deny message.

Serverless Custom Authorizer

Example of a serverless service that uses API Gateway custom authorizer to authorize your endpoints, and can custom deny message.

Usage

• serverless install --url https://github.com/SeptiyanAndika/serverless-custom-authorizer

• cd serverless-custom-authorizer

• serverless deploy

• Notice the displayed endpoint after deployment

• curl --header "Authorization: allow" <private endpoint> - Should work! Authorized!

• curl --header "Authorization: deny" <private endpoint> - Should not work

  {
      "success":false,
      "message":"Custom Deny Message"
  }

• curl --header "Authorization: unauthorized" <private endpoint> - Should not work

• curl --header "Authorization: blabla" <private endpoint> - Should not work

• curl <private endpoint> - Should not work

  {
      "success":false,
      "message":"Unauthorized"
  }

• curl <public endpoint> - Should work

serverless-custom-authorizer's Issues

Getting standard 401 on /private

Not seeing anything custom that can be invoked. Brought it down and ran as-is.