https://github.com/approov/aws-api-gateway_approov-proxy-authorizer
An Approov lambda authorizer in Python for the AWS API Gateway
https://github.com/approov/aws-api-gateway_approov-proxy-authorizer
api api-authentication api-gateway api-gateway-custom-authorizer apis approov approov-backend-quicksart approov-quickstart approov-token aws aws-api aws-lambda aws-lambda-python lambda-authoriser lambda-authorizer
Last synced: 3 months ago
JSON representation
An Approov lambda authorizer in Python for the AWS API Gateway
- Host: GitHub
- URL: https://github.com/approov/aws-api-gateway_approov-proxy-authorizer
- Owner: approov
- License: mit
- Created: 2019-09-12T10:22:37.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2019-09-18T09:54:01.000Z (about 6 years ago)
- Last Synced: 2025-02-26T23:57:46.383Z (8 months ago)
- Topics: api, api-authentication, api-gateway, api-gateway-custom-authorizer, apis, approov, approov-backend-quicksart, approov-quickstart, approov-token, aws, aws-api, aws-lambda, aws-lambda-python, lambda-authoriser, lambda-authorizer
- Language: Python
- Homepage: https://approov.io
- Size: 35.2 KB
- Stars: 1
- Watchers: 7
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Approov Proxy Authorizer for the AWS API Gateway
These Python code examples are for implementing [Approov](https://approov.io/approov-in-detail.html) as a Proxy
Authorizer in the AWS API Gateway, and you can learn how to do it by reading the [Approov AWS Serverless API Proxy](https://info.approov.io/approov-api-proxy-ebook) e-book.
## AWS API Gateway Authorizer
The `ApproovV2/lambda_function.py` will implement a proxy authorizer for Approov tokens in an AWS API Gateway.
The Approov authorizer will validate the Approov token for being signed correctly, not being expired, and optionally can
validate if the token binding on it matches the token binding value in the header of the request.
### Response Codes
#### If invalid returns:
* 401 - when the Approov token cannot be decoded.
* 403 - when the Approov token can be decoded but is expired or the token binding doesn't match with the value in the header of the request. Also returns a 403 for when allow policy conditions fail.
#### If valid returns:
* 200 - when the Approov token is valid and policy conditions are met. The body will contain the data for the response to the request.
### Requirements
* Authorizer Runtime: Python 3
* Python dependencies: PyJWT
## Issue Reporting
If you have found a bug please report them [here](https://github.com/approov/aws-api-gateway_approov-proxy-authorizer/issues/new).
## License
This project is licensed under the MIT license. See the [LICENSE](LICENSE) file for more info.