medwig/serverless-python-custom-authorizer-example

Example implementation of a AWS Api Gateway custom authorizer lambda in python, using the Serverless Framework

Serverless AWS Custom Authorizer Python Lambda

An example implementation of an AWS custom authorizer. Written in python, deployed with the Serverless Framework.

A very simple example to demonstrate the principle and to build off of. Typically you would replace the hardcoded api key check with a database lookup, for example.

Deploy

$ serverless deploy

Test

Un-authenticated request

$ curl <foo_endpoint_url> -H "Authorization:Bearer wrong"

{"Message":"User is not authorized to access this resource with an explicit deny"}

Authenticated request

$ curl <foo_endpoint_url> -H "Authorization:Bearer 123abc"

{"it": "worked!"}