archive-gh-me/serverless
1
0
Fork 0
mirror of https://github.com/serverless/serverless.git synced 2026-01-25 15:07:39 +00:00
Code Issues Projects Releases Wiki Activity

added permission to authorizer

Browse Source
This commit is contained in:
Eslam A. Hefnawy 2016-07-20 19:42:20 +09:00
parent 29f7af0fa2
commit 08418b52ed
3 changed files with 57 additions and 39 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

70
lib/plugins/aws/deploy/compile/events/apiGateway/lib/authorizers.js
View File

@ -7,40 +7,36 @@ module.exports = {
compileAuthorizers() {
_.forEach(this.serverless.service.functions, (functionObject, functionName) => {
functionObject.events.forEach(event => {
if (event.http && event.http.authorizers) {
event.http.authorizers.forEach(authorizer => {
let resultTtlInSeconds;
let authorizerName;
let identitySource;
if (event.http && event.http.authorizer) {
const authorizer = event.http.authorizer;
let resultTtlInSeconds;
let authorizerName;
let identitySource;
const extractedResourceId = this.resourceLogicalIds[event.http.path].match(/\d+$/)[0];
const normalizedMethod = event.http.method[0].toUpperCase() +
event.http.method.substr(1).toLowerCase();
if (typeof authorizer === 'string') {
authorizerName = authorizer;
resultTtlInSeconds = '300';
identitySource = 'method.request.header.Auth';
} else if (typeof authorizer === 'object') {
authorizerName = authorizer.name;
resultTtlInSeconds = authorizer.resultTtlInSeconds || '300';
identitySource = authorizer.identitySource || 'method.request.header.Auth';
} else {
const errorMessage = [
`authorizer property in function ${functionName} is not an object nor a string.`,
' The correct format is: authorizer: functionName',
' OR an object containing a name property.',
' Please check the docs for more info.',
].join('');
throw new this.serverless.classes
.Error(errorMessage);
}
if (typeof authorizer === 'string') {
authorizerName = authorizer;
resultTtlInSeconds = '300';
identitySource = 'method.request.header.Auth';
} else if (typeof authorizer === 'object') {
authorizerName = authorizer.name;
resultTtlInSeconds = authorizer.resultTtlInSeconds || '300';
identitySource = authorizer.identitySource || 'method.request.header.Auth';
} else {
const errorMessage = [
`Authorizer item in function ${functionName} is not an object nor a string.`,
' Please make sure each authorizer in the "authorizers"',
' array is a string or an object.',
' Please check the docs for more info.',
].join('');
throw new this.serverless.classes
.Error(errorMessage);
}
// validate referenced authorizer
// function exists in service
this.serverless.service.getFunction(authorizerName);
// validate referenced authorizer
// function exists in service
this.serverless.service.getFunction(authorizerName);
const authorizerTemplate = `
const authorizerTemplate = `
{
"Type" : "AWS::ApiGateway::Authorizer",
"Properties" : {
@ -59,14 +55,12 @@ module.exports = {
}
`;
const authorizerObject = {
[`${authorizerName}Authorizer`]:
JSON.parse(authorizerTemplate),
};
const authorizerObject = {
[`${authorizerName}Authorizer`]: JSON.parse(authorizerTemplate),
};
_.merge(this.serverless.service.resources.Resources,
authorizerObject);
});
_.merge(this.serverless.service.resources.Resources,
authorizerObject);
}
});
});

2
lib/plugins/aws/deploy/compile/events/apiGateway/lib/methods.js
View File

@ -118,7 +118,7 @@ module.exports = {
// set authorizer config if available
if (event.http.authorizer) {
const AuthorizerLogicalId = `${authorizerName}Authorizer`;
const AuthorizerLogicalId = `${event.http.authorizer}Authorizer`;
methodTemplateJson.Properties.AuthorizationType = 'CUSTOM';
methodTemplateJson.Properties.AuthorizerId = {

24
lib/plugins/aws/deploy/compile/events/apiGateway/lib/permissions.js
View File

@ -50,6 +50,30 @@ module.exports = {
};
_.merge(this.serverless.service.resources.Resources, newPermissionObject);
// if authorizer is defined, we need to add
// permission to invoke this lambda function too
// TODO: if the authorizer function has http event,
// will that permision conflict?
if (event.http.authorizer) {
const authorizerPermissionTemplate = `
{
"Type": "AWS::Lambda::Permission",
"Properties": {
"FunctionName": { "Fn::GetAtt": ["${event.http.authorizer}", "Arn"] },
"Action": "lambda:InvokeFunction",
"Principal": "apigateway.amazonaws.com"
}
}
`;
const authorizerPermissionLogicalId = `${normalizedMethod}AuthPermissionApigEvent${this
.resourcePaths.indexOf(path)}`;
const newAuthPermissionObject = {
[authorizerPermissionLogicalId]: JSON.parse(authorizerPermissionTemplate),
};
_.merge(this.serverless.service.resources.Resources, newAuthPermissionObject);
}
}
});
});