Custom authorizer

.github/workflows/workflow.yml

@@ -19,10 +19,31 @@ jobs:
       run: |
         npm run test
 
+  # layer build
+  buid-js-layer-deps:
+    timeout-minutes: 15
+    runs-on: ubuntu-latest
+    name: Build SLS Layer - Prod
+    container:
+      image: "node:14-buster"
+    steps:
+      - uses: actions/checkout@v2
+      - run: |
+          npm install --production
+          mkdir nodejs
+          mv node_modules nodejs
+          apt update -y && apt install zip -y
+          zip -r nodejs.zip nodejs/
+
+      - uses: actions/upload-artifact@v2
+        with:
+          name: nodejsdeps
+          path: nodejs.zip
+
   deploy-env:
     name: Deploy Lambda
     runs-on: ubuntu-latest
-    needs: testing-changes
+    needs: [testing-changes, buid-js-layer-deps]
     steps:
     - uses: actions/checkout@v2.0.0
 
@@ -37,6 +58,11 @@ jobs:
       if: steps.cached-npm-dependencies.outputs.cache-hit != 'true'
       run: 'npm install'
 
+    - uses: actions/download-artifact@v2
+      with:
+        name: nodejsdeps
+        path: app/  
+
     - name: Deploy using sls
       run: 'npx sls deploy'
       env:

.gitignore

@@ -1,4 +1,5 @@
 node_modules
 .dynamodb/
 .serverless
-venv
+venv
+nodejs.zip

authorizer/handler.js

@@ -0,0 +1,26 @@
+const authorize = async (event, context) => {
+  let date = new Date();
+  let minutes = date.getMinutes();
+  let hour = date.getHours();
+
+  if (event.authorizationToken === `Bearer ${process.env.SECRET_EGG}-${hour}-${minutes}`) {
+    return {
+      principalId: 'anonymous',
+      policyDocument: {
+        Version: '2012-10-17',
+        Statement: [
+          {
+            Action: 'execute-api:Invoke',
+            Effect: 'Allow',
+            Resource: event.methodArn,
+          },
+        ],
+      },
+    };
+  }
+  throw Error('Unauthorized');
+}
+
+module.exports = {
+  authorize
+}