8
votes

I'm currently building a web application whose backend is purely build in API Gateway/Lambda. I build a custom JSON Web Token (JWT) authorizer to authorize the users. At the moment I'm passing token in header field.

Unfortunately, I'm only able to define a header field in which the token is send to API Gateway.My applications stores the token in a cookie.

Is there any option to access the cookie directly so that it can authenticate using lambda.

For example:

Now I'm passing:-

method.request.header.Authorizer

But I need somehting like this :-

methods.request.header.Cookie

Any workaround ? Thanks!

1

1 Answers

7
votes

Now you should be able to access all the headers including Cookie header, using Custom Authorizers of the REQUEST type. Recently AWS introduced this feature to allow access to more than Token Header.

enter image description here