Authorization header (what about in form parameter?)

0

We currently support Authorization being passed in the header.

But we have one customer saying that they cannot pass header parameter and can only pass form parameter.

How can we enforce Auth if authorization is coming from form parameters?

Note: we are using Hydra as OAuth2 server

asked 4 years ago37 views
3 Answers
0

Hello:

Unfortunately there is currently no native authorization in API Gateway that supports access to the payload (where form parameters would be present). You would have to pass this information to your integration and authorize the request in your integration.

Regards,
Bob

EXPERT
answered 4 years ago
0

when you say Integration... you mean like in a Lambda Integration. I will be checking the client credentials against hydra in one of the Lambda itself

that is exactly what I am thinking. But having doubts if it beats the best practices
unfortunately, we need to support the customer's needs

answered 4 years ago
0

when you say Integration... you mean like in a Lambda Integration

Correct. Apologies for the inconvenience.

Regards,
Bob

EXPERT
answered 4 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions