awsapigatewayv2authorizers

Documentation

Index

• func NewHttpJwtAuthorizer_Override(h HttpJwtAuthorizer, props *HttpJwtAuthorizerProps)
• func NewHttpLambdaAuthorizer_Override(h HttpLambdaAuthorizer, props *HttpLambdaAuthorizerProps)
• func NewHttpUserPoolAuthorizer_Override(h HttpUserPoolAuthorizer, props *UserPoolAuthorizerProps)
• type HttpJwtAuthorizer
  • func NewHttpJwtAuthorizer(props *HttpJwtAuthorizerProps) HttpJwtAuthorizer
• type HttpJwtAuthorizerProps
• type HttpLambdaAuthorizer
  • func NewHttpLambdaAuthorizer(props *HttpLambdaAuthorizerProps) HttpLambdaAuthorizer
• type HttpLambdaAuthorizerProps
• type HttpLambdaResponseType
• type HttpUserPoolAuthorizer
  • func NewHttpUserPoolAuthorizer(props *UserPoolAuthorizerProps) HttpUserPoolAuthorizer
• type UserPoolAuthorizerProps

Functions

func NewHttpJwtAuthorizer_Override

func NewHttpJwtAuthorizer_Override(h HttpJwtAuthorizer, props *HttpJwtAuthorizerProps)

Experimental.

func NewHttpLambdaAuthorizer_Override

func NewHttpLambdaAuthorizer_Override(h HttpLambdaAuthorizer, props *HttpLambdaAuthorizerProps)

Experimental.

func NewHttpUserPoolAuthorizer_Override

func NewHttpUserPoolAuthorizer_Override(h HttpUserPoolAuthorizer, props *UserPoolAuthorizerProps)

Experimental.

Types

type HttpJwtAuthorizer

type HttpJwtAuthorizer interface {
	awsapigatewayv2.IHttpRouteAuthorizer
	Bind(options *awsapigatewayv2.HttpRouteAuthorizerBindOptions) *awsapigatewayv2.HttpRouteAuthorizerConfig
}

Authorize Http Api routes on whether the requester is registered as part of an AWS Cognito user pool. Experimental.

func NewHttpJwtAuthorizer

func NewHttpJwtAuthorizer(props *HttpJwtAuthorizerProps) HttpJwtAuthorizer

Experimental.

type HttpJwtAuthorizerProps

type HttpJwtAuthorizerProps struct {
	// A list of the intended recipients of the JWT.
	//
	// A valid JWT must provide an aud that matches at least one entry in this list.
	// Experimental.
	JwtAudience *[]*string `json:"jwtAudience"`
	// The base domain of the identity provider that issues JWT.
	// Experimental.
	JwtIssuer *string `json:"jwtIssuer"`
	// The name of the authorizer.
	// Experimental.
	AuthorizerName *string `json:"authorizerName"`
	// The identity source for which authorization is requested.
	// Experimental.
	IdentitySource *[]*string `json:"identitySource"`
}

Properties to initialize HttpJwtAuthorizer. Experimental.

type HttpLambdaAuthorizer

type HttpLambdaAuthorizer interface {
	awsapigatewayv2.IHttpRouteAuthorizer
	Bind(options *awsapigatewayv2.HttpRouteAuthorizerBindOptions) *awsapigatewayv2.HttpRouteAuthorizerConfig
}

Authorize Http Api routes via a lambda function. Experimental.

func NewHttpLambdaAuthorizer

func NewHttpLambdaAuthorizer(props *HttpLambdaAuthorizerProps) HttpLambdaAuthorizer

Experimental.

type HttpLambdaAuthorizerProps

type HttpLambdaAuthorizerProps struct {
	// The name of the authorizer.
	// Experimental.
	AuthorizerName *string `json:"authorizerName"`
	// The lambda function used for authorization.
	// Experimental.
	Handler awslambda.IFunction `json:"handler"`
	// The identity source for which authorization is requested.
	// Experimental.
	IdentitySource *[]*string `json:"identitySource"`
	// The types of responses the lambda can return.
	//
	// If HttpLambdaResponseType.SIMPLE is included then
	// response format 2.0 will be used.
	// See: https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-lambda-authorizer.html#http-api-lambda-authorizer.payload-format-response
	//
	// Experimental.
	ResponseTypes *[]HttpLambdaResponseType `json:"responseTypes"`
	// How long APIGateway should cache the results.
	//
	// Max 1 hour.
	// Disable caching by setting this to `Duration.seconds(0)`.
	// Experimental.
	ResultsCacheTtl awscdk.Duration `json:"resultsCacheTtl"`
}

Properties to initialize HttpTokenAuthorizer. Experimental.

type HttpLambdaResponseType

type HttpLambdaResponseType string

Specifies the type responses the lambda returns. Experimental.

const (
	HttpLambdaResponseType_SIMPLE HttpLambdaResponseType = "SIMPLE"
	HttpLambdaResponseType_IAM    HttpLambdaResponseType = "IAM"
)

type HttpUserPoolAuthorizer

type HttpUserPoolAuthorizer interface {
	awsapigatewayv2.IHttpRouteAuthorizer
	Bind(options *awsapigatewayv2.HttpRouteAuthorizerBindOptions) *awsapigatewayv2.HttpRouteAuthorizerConfig
}

Authorize Http Api routes on whether the requester is registered as part of an AWS Cognito user pool. Experimental.

func NewHttpUserPoolAuthorizer

func NewHttpUserPoolAuthorizer(props *UserPoolAuthorizerProps) HttpUserPoolAuthorizer

Experimental.

type UserPoolAuthorizerProps

type UserPoolAuthorizerProps struct {
	// The associated user pool.
	// Experimental.
	UserPool awscognito.IUserPool `json:"userPool"`
	// The user pool client that should be used to authorize requests with the user pool.
	// Experimental.
	UserPoolClient awscognito.IUserPoolClient `json:"userPoolClient"`
	// The name of the authorizer.
	// Experimental.
	AuthorizerName *string `json:"authorizerName"`
	// The identity source for which authorization is requested.
	// Experimental.
	IdentitySource *[]*string `json:"identitySource"`
	// The AWS region in which the user pool is present.
	// Experimental.
	UserPoolRegion *string `json:"userPoolRegion"`
}

Properties to initialize UserPoolAuthorizer. Experimental.