Task 7. Authorization

[Guria]

Task 7 assignment

Note for reviewers

• I use this issue instead of PR to collect everything about this task and all referenced PR are merged already.
• I use single monorepo with both BE and FE for a good reason: FE build uses outputs of BE stacks. Organizers have confirmed that it is acceptable.
• Check Task 2. Serve SPA in AWS S3 and Cloudfront Services #3, Task 3. First API with AWS API Gateway and AWS Lambda #18, Task 4. Integration with DynamoDB #22, Task 5. Integration with S3 #27, Task 6. SQS & SNS, Async Microservices Communication #33 and commit history if you want to learn more about setup and reasoning. Issues, PRs and each commit messages contain lot of details.
• Please provide your evaluation in comments and fill in the form.

Task 7 Artifacts (Pull Request #34)

Task 7.1

✔️ create a new service called authorization-service
✔️ create a lambda function called basicAuthorizer in the Authorization Service.
✔️ lambda has an environment variable with the following credentials: USER_GURIA=TEST_PASSWORD
✔️ basicAuthorizer lambda takes Basic Authorization token, decodes it and checks that credentials provided by token exist in the lambda environment variable.
✔️ lambda returns 403 HTTP status if access is denied for this user (invalid authorization_token) and 401 HTTP status if Authorization header is not provided.
✔️ credentials are not stored under VCS and provided to environment from repository encrypted secrets

Task 7.2

✔️ basicAuthorizer lambda is set to /import path of the API Gateway as lambda authorizer.

Task 7.3

✔️ request from the client application to the /import path has Basic Authorization header Authorization: Basic {authorization_token}
✔️ {authorization_token} is a base64-encoded GURIA:TEST_PASSWORD
✔️ client gets authorization_token value from browser localStorage

Additional tasks:
➕ client application should display alerts for the responses in 401 and 403 HTTP statuses.

Links to deployment

All PRs are merged. So app is deployed from main branch.

Web App deployed to Cloudfront and available at following addresses:

• https://d2jcmizbd9mqzq.cloudfront.net
• https://ajp-stg.guria.dev
  Swagger Schema available at:
• https://ajp-stg.guria.dev/swagger/swagger.json
  Swagger UI available at:
• https://ajp-stg.guria.dev/swagger/index.html

[VladOstk]

Good job, mark 6