Usage Plan / Rate limit / x-api-key

0

We currently require x-api-key header to be passed. This is how we control usage plan and limit
One customer of ours said that they cannot pass header parameters and they can only do urlencoded form parameters.

My question is how can we enforce usage plan / limiting if x-api-key will be coming from form parameters?

已提問 5 年前檢視次數 412 次
3 個答案
1

Hello:

You can provide the key as the result of a lambda authorizer which will have access to headers, url parameters and query string, but not body parameters.

https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-api-key-source.html

Regards,
Bob

專家
已回答 5 年前
1

Hello:

Unfortunately there isn't currently an option that would support your use case. Apologies for the inconvenience.

Regards,
Bob

專家
已回答 5 年前
0

Bob,

Thank you for taking time to reply.

I am the same person asking on this thread: https://forums.aws.amazon.com/thread.jspa?messageID=887871&#887871

I could have asked both my questions in one thread but they are not related so I created a thread for each of my question.

so based on this: https://forums.aws.amazon.com/thread.jspa?messageID=887871&#887871

I will be doing authorization in the Integration level... meaning I won't be having the Authorizer configured anymore
how am I going to enforce x-api-key without an authorizer?

已回答 5 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南