https://github.com/praveenweb/hasura-aws-serverless
Learn how to make use of different AWS Services with Hasura Cloud and GraphQL
https://github.com/praveenweb/hasura-aws-serverless
aws-cognito aws-lambda aws-rds hasura
Last synced: 6 months ago
JSON representation
Learn how to make use of different AWS Services with Hasura Cloud and GraphQL
- Host: GitHub
- URL: https://github.com/praveenweb/hasura-aws-serverless
- Owner: praveenweb
- Created: 2021-11-17T17:30:34.000Z (almost 4 years ago)
- Default Branch: master
- Last Pushed: 2021-11-17T17:30:51.000Z (almost 4 years ago)
- Last Synced: 2025-02-14T04:31:27.569Z (8 months ago)
- Topics: aws-cognito, aws-lambda, aws-rds, hasura
- Homepage:
- Size: 1000 Bytes
- Stars: 4
- Watchers: 2
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
## Create a Hasura Cloud Project
- Click on the following button to create a new free project on Hasura Cloud:
## Setup Amazon RDS PostgreSQL
- Login to the [AWS Console](https://console.aws.amazon.com/console/home).
- Create a new database with AWS RDS and select PostgreSQL.
- Allow public access and assign a VPC security group.
- Configure Hasura Cloud IP in inbound rules.
- Database URL format `postgresql://:@:/`
- Connect to Hasura Cloud
## Setup Amazon Cognito with JWT
- [Create user pools](https://docs.aws.amazon.com/cognito/latest/developerguide/getting-started-with-cognito-user-pools.html)
- Add an app client and note down the client ID.
- Configure app client settings, callback and signout URLs, enable Implicit Grant Flow for JWT
- Choose a domain name
- Hosted UI page - `https://your_domain/login?response_type=token&client_id=your_app_client_id&redirect_uri=http://localhost:3000/callback`
### Add Custom JWT Claims for Hasura
- Navigate to [AWS Lambda](https://console.aws.amazon.com/lambda/home)
- Create a function
- Copy the following handler code to generate custom claims
```javascript
exports.handler = (event, context, callback) => {
event.response = {
"claimsOverrideDetails": {
"claimsToAddOrOverride": {
"https://hasura.io/jwt/claims": JSON.stringify({
"x-hasura-user-id": event.request.userAttributes.sub,
"x-hasura-default-role": "user",
// do some custom logic to decide allowed roles
"x-hasura-allowed-roles": ["user"],
})
}
}
}
callback(null, event)
}
```
- In Cognito, under Triggers, configure `Pre Token Generation` handler and select the lamdba function we just created above.
- Head to App Client Settings and click on `Launch Hosted UI`. Signup with a user and copy the id_token portion.
- Test the JWT in the debugger of [jwt.io](https://jwt.io)
### Configure Hasura Cloud ENV
- Copy the following config for `HASURA_GRAPHQL_JWT_SECRET` env.
```JSON
{
"type":"RS256",
"jwk_url": "https://cognito-idp..amazonaws.com//.well-known/jwks.json",
"claims_format": "stringified_json"
}
```
Substitute the aws-region and user-pool-id from the URL parameters / General settings
### Create permissions for the role user
- Head to the table permissions tab, create a new role called `user` and apply a filter for `id` column to map to `x-hasura-user-id`.
## Set up Lambda for Hasura Events
- Create a simple function on Lambda.
- Add a route on API Gateway to expose the function outside.
- Add the endpoint to Hasura events to test an Event Trigger on a database table.