com.amazonaws.serverless.proxy.internal.jaxrs

Class AwsProxySecurityContext

java.lang.Object

com.amazonaws.serverless.proxy.internal.jaxrs.AwsProxySecurityContext

All Implemented Interfaces:

javax.ws.rs.core.SecurityContext

public class AwsProxySecurityContext
extends java.lang.Object
implements javax.ws.rs.core.SecurityContext

default implementation of the SecurityContext object. This class supports 3 API Gateway's authorization methods: AWS_IAM, CUSTOM_AUTHORIZER, and COGNITO_USER_POOL (oidc). The Principal returned by the object depends on the authorization model: * AWS_IAM: User ARN * CUSTOM_AUTHORIZER: Custom user principal * COGNITO_USER_POOL: Cognito identity id

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	AwsProxySecurityContext.CognitoUserPoolPrincipal Custom object for request authorized with a Cognito User Pool authorizer.

Field Summary

Fields inherited from interface javax.ws.rs.core.SecurityContext

BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH

Constructor Summary

Constructors

Constructor and Description
AwsProxySecurityContext(com.amazonaws.services.lambda.runtime.Context lambdaContext, AwsProxyRequest event)

Method Summary

Modifier and Type	Method and Description
java.lang.String	getAuthenticationScheme()
AwsProxyRequest	getEvent()
com.amazonaws.services.lambda.runtime.Context	getLambdaContext()
java.security.Principal	getUserPrincipal()
boolean	isSecure()
boolean	isUserInRole(java.lang.String role)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AwsProxySecurityContext

public AwsProxySecurityContext(com.amazonaws.services.lambda.runtime.Context lambdaContext,
                               AwsProxyRequest event)

Method Detail

getLambdaContext

public com.amazonaws.services.lambda.runtime.Context getLambdaContext()

getEvent

public AwsProxyRequest getEvent()

getUserPrincipal

public java.security.Principal getUserPrincipal()

Specified by:

getUserPrincipal in interface javax.ws.rs.core.SecurityContext

isUserInRole

public boolean isUserInRole(java.lang.String role)

Specified by:

isUserInRole in interface javax.ws.rs.core.SecurityContext

isSecure

public boolean isSecure()

Specified by:

isSecure in interface javax.ws.rs.core.SecurityContext

getAuthenticationScheme

public java.lang.String getAuthenticationScheme()

Specified by:

getAuthenticationScheme in interface javax.ws.rs.core.SecurityContext