security

type Authorizer ¶

type Authorizer interface {
	Authorize(userID string, roles []string, request Request) (bool, error)
}

Authorizer interface used to decide if a user has access to a specific resource.

type Request ¶

type Request events.APIGatewayProxyRequest

Request is of type APIGatewayProxyRequest since we're leveraging the AWS Lambda Proxy Request functionality (default behavior)

https://serverless.com/framework/docs/providers/aws/events/apigateway/#lambda-proxy-integration

type RequestHandler ¶

type RequestHandler func(request Request) (Response, error)

RequestHandler is called to handle an incoming HTTP request.

func NewAdminAuthorizationHandler(handler SecuredRequestHandler) RequestHandler

func NewAuthorizationByRolesHandler(handler SecuredRequestHandler, roles []string) RequestHandler

func NewAuthorizationHandler(handler SecuredRequestHandler, authorizer Authorizer) RequestHandler

type Response ¶

type Response events.APIGatewayProxyResponse

Response is of type APIGatewayProxyResponse since we're leveraging the AWS Lambda Proxy Request functionality (default behavior)

https://serverless.com/framework/docs/providers/aws/events/apigateway/#lambda-proxy-integration

type SecuredRequestHandler ¶

type SecuredRequestHandler func(request Request, userID string, roles []string) (Response, error)

SecuredRequestHandler is called by the security checker to handle an incoming HTTP request.