chalice-cognito-auth 獲得了 id_token 但仍然得到“用戶未授權”

Question

嘗試使用https://pypi.org/project/chalice-cognito-auth/

我能夠得到 json 響應，例如：

{"id_token":"eyJra...sda",
"refresh_token":"eyJjd...",
"access_token":"eyJraWQiO...",
"token_type":"Bearer"}

但是當我嘗試使用它時

curl -H "Authorization: id_token value ..." http://127.0.0.1:8000/whoami

它回復了

{
    "Message": "User is not authorized to access this resource"
}

Answer 1

試試這個， curl -H "Authorization: Bearer id_token" http://127.0.0.1:8000/whoami

即，您錯過了Bearer關鍵字。