如何解决无服务器框架 3 中的授权问题？

Question

When I use Serverless framework 2, I defined authorizer like the below way.

sample:
  handler: sample.handler
  events:
    - http:
        path: sample
        method: get
        cors: true
        authorizer: verify-token

But It's not supported in Serverless framework 3. Now, I am getting the below error.

Incorrect type. Expected "Aws.HttpAuthorizer".yaml-schema: Serverless Framework Configuration

I looked at their deprecated doc But I don't find the solution. How can resolve this issue?

Answer 1

just curious if anyone has found an answer for this?

Incorrect type. Expected "Aws.HttpAuthorizer".

Answer 2

Seems like serverless expects you to define HttpAuthorizer instead of Lambda Authorizer for AWS REST API

Definitions of the settings are here: https://raw.githubusercontent.com/lalcebo/json-schema/master/serverless/reference.json

Rest API (V1) is actually more advanced. see: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_ApiGateway.html or https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_ApiGatewayV2.html

Answer 3

Check the following documentation: https://serverless.com/framework/docs/providers/aws/events/apigateway#http-endpoints-with-custom-authorizers

The authorizer declaration must be completed in v3:

sample:
  handler: sample.handler
  events:
    - http:
        path: sample
        method: get
        cors: true
        authorizer:
          arn: xxx:xxx:verify-token
          managedExternally: false
          resultTtlInSeconds: 0
          identitySource: method.request.header.Authorization
          identityValidationExpression: someRegex