How to implement Basic Authentication in API gateway

Question

I have an API proxy, I want to implement Basic Authentication mechanism for it.
```
curl -v https://example.com/dev/test
-H "Authorization: Basic {clientID:ClientSecret - Base64EncodedValue}"
```
I do not want to get an access token from Cognito and make another request to the API gateway.

Answer

You can use [API Gateway Lambda authorizers](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-use-lambda-authorizer.html) to validate the username and password. The Lambda would receive the request extract the Base64-encoded credentials, decode them, and then verifies the username and password against credentials from a database. The Lambda then generates a policy indicating what the user can and can't do e.g. `GET /users`. The policy is then cached so the Lambda authorizer isn't called on every request.

How to implement Basic Authentication in API gateway

相关内容