serverless-custom-authorizer
serverless-custom-authorizer copied to clipboard
Example of a serverless service that uses API Gateway custom authorizer to authorize your endpoints, and can custom deny message.
Serverless Custom Authorizer
Example of a serverless service that uses API Gateway custom authorizer to authorize your endpoints, and can custom deny message.
Usage
-
serverless install --url https://github.com/SeptiyanAndika/serverless-custom-authorizer -
cd serverless-custom-authorizer -
serverless deploy -
Notice the displayed endpoint after deployment
-
curl --header "Authorization: allow" <private endpoint>- Should work! Authorized! -
curl --header "Authorization: deny" <private endpoint>- Should not work{ "success":false, "message":"Custom Deny Message" } -
curl --header "Authorization: unauthorized" <private endpoint>- Should not work -
curl --header "Authorization: blabla" <private endpoint>- Should not work -
curl <private endpoint>- Should not work{ "success":false, "message":"Unauthorized" } -
curl <public endpoint>- Should work