Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

AppSync: support for additional authorization modes #6247

Closed
1 of 2 tasks
duarten opened this issue Feb 12, 2020 · 1 comment · Fixed by #6260
Closed
1 of 2 tasks

AppSync: support for additional authorization modes #6247

duarten opened this issue Feb 12, 2020 · 1 comment · Fixed by #6260
Assignees
@MrArnoldPalmer
Labels
@aws-cdk/aws-appsync Related to AWS AppSync feature-request A feature should be added or improved. in-progress This issue is being actively worked on. needs-triage This issue or PR still needs to be triaged.

Comments

@duarten
Copy link
Contributor

duarten commented Feb 12, 2020

Currently the AppSync L2 constructs don't provide a way to configure additional authorization modes.

Use Case

For example, configuring a GraphQL API with user pool authorization doesn't allow unauthenticated access, and one way to solve that without splitting the API is to add an additional authorization mode.

Other

  • 👋 I may be able to implement this feature request
  • ⚠️ This feature might incur a breaking change

This is a 🚀 Feature Request
@duarten duarten added feature-request A feature should be added or improved. needs-triage This issue or PR still needs to be triaged. labels Feb 12, 2020
duarten added a commit to duarten/aws-cdk that referenced this issue Feb 13, 2020
@duarten
feat(appsync): allow specifying additional authorization modes
f3f9c16 
Currently the AppSync L2 constructs don't provide a way to configure
additional authorization modes. Add the ability to specify additional
authorization modes, currently limited to Cognito user pools and API
keys.

Fixes aws#6247

Signed-off-by: Duarte Nunes <[email protected]>
duarten added a commit to duarten/aws-cdk that referenced this issue Feb 13, 2020
@duarten
feat(appsync): allow specifying additional authorization modes
936498a 
Currently the AppSync L2 constructs don't provide a way to configure
additional authorization modes. Add the ability to specify additional
authorization modes, currently limited to Cognito user pools and API
keys.

Fixes aws#6247

Signed-off-by: Duarte Nunes <[email protected]>
@duarten duarten mentioned this issue Feb 13, 2020
Merged
duarten added a commit to duarten/aws-cdk that referenced this issue Feb 13, 2020
@duarten
feat(appsync): allow specifying additional authorization modes
11b0b7d 
Currently the AppSync L2 constructs don't provide a way to configure
additional authorization modes. Add the ability to specify additional
authorization modes, currently limited to Cognito user pools and API
keys.

Fixes aws#6247

Signed-off-by: Duarte Nunes <[email protected]>
duarten added a commit to duarten/aws-cdk that referenced this issue Feb 13, 2020
@duarten
feat(appsync): allow specifying additional authorization modes
df5744d 
Currently the AppSync L2 constructs don't provide a way to configure
additional authorization modes. Add the ability to specify additional
authorization modes, currently limited to Cognito user pools and API
keys.

Fixes aws#6247

Signed-off-by: Duarte Nunes <[email protected]>
@SomayaB SomayaB added the @aws-cdk/aws-appsync Related to AWS AppSync label Feb 13, 2020
@SomayaB SomayaB added the in-progress This issue is being actively worked on. label Feb 13, 2020
duarten added a commit to duarten/aws-cdk that referenced this issue Feb 19, 2020
@duarten
feat(appsync): allow specifying additional authorization modes
96e9910 
Currently the AppSync L2 constructs don't provide a way to configure
additional authorization modes. Add the ability to specify additional
authorization modes, currently limited to Cognito user pools and API
keys.

Fixes aws#6247

Signed-off-by: Duarte Nunes <[email protected]>
@interrobrian
Copy link

I have this problem, but I need to use the OPENID_CONNECT authenticationType.

duarten added a commit to duarten/aws-cdk that referenced this issue Feb 22, 2020
@duarten
feat(appsync): allow specifying additional authorization modes
303924b 
Currently the AppSync L2 constructs don't provide a way to configure
additional authorization modes. Add the ability to specify additional
authorization modes, currently limited to Cognito user pools and API
keys.

Fixes aws#6247

Signed-off-by: Duarte Nunes <[email protected]>
@mergify mergify bot closed this as completed in #6260 Feb 25, 2020
mergify bot added a commit that referenced this issue Feb 25, 2020
@duarten @mergify
feat(appsync): extend authorization configuration (#6260)
948881a 
* feat(appsync): allow configuring API key authorization mode

By default, the AppSync L2 constructs use API key authorization, but it
doesn't allow configuring the API key.

Fix that by allowing a default authorization mode to be specified.
Currently, the supported modes are Cognito user pools and API keys. When
specifying API key authorization, allow configuring it.

BREAKING CHANGE:
    Configuration the user pool authorization is now done through the
    authorizationConfig property. This allows us to specify a default
    authorization mode out of the supported ones, currently limited to
    Cognito user pools and API keys.

Fixes #6246

Signed-off-by: Duarte Nunes <[email protected]>

* feat(appsync): allow specifying additional authorization modes

Currently the AppSync L2 constructs don't provide a way to configure
additional authorization modes. Add the ability to specify additional
authorization modes, currently limited to Cognito user pools and API
keys.

Fixes #6247

Signed-off-by: Duarte Nunes <[email protected]>

* test(integ.graphql): test cognito and api key authorization

Test using cognito user pools as the default authorization mode and an
api key as the additional mode.

Signed-off-by: Duarte Nunes <[email protected]>

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
@akrsmv akrsmv mentioned this issue Apr 5, 2020
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@MrArnoldPalmer MrArnoldPalmer

Labels
@aws-cdk/aws-appsync Related to AWS AppSync feature-request A feature should be added or improved. in-progress This issue is being actively worked on. needs-triage This issue or PR still needs to be triaged.
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

feat(appsync): extend authorization configuration duarten/aws-cdk
4 participants
@duarten @interrobrian @MrArnoldPalmer @SomayaB