0

我正在尝试使用 Lambda (node.js) 为 websockets 创建一个简单的请求授权器，但我不断收到错误 500。我使用的代码是 aws 文档中提供的演示。我调用 wss://*****/production?QueryString1=queryValue1 的 url

我已经在 apigateway 上创建了一个请求授权人，并按照 aws apigateway 文档中的所有说明进行操作，但仍然得到未经授权的响应或 500？

exports.handler = function(event, context, callback) {        
console.log('Received event:', JSON.stringify(event, null, 2));

// A simple request-based authorizer example to demonstrate how to use request 
// parameters to allow or deny a request. In this example, a request is  
// authorized if the client-supplied headerauth1 header, QueryString1
// query parameter, and stage variable of StageVar1 all match
// specified values of 'headerValue1', 'queryValue1', and 'stageValue1',
// respectively.

// Retrieve request parameters from the Lambda function input:
var headers = event.headers;
var queryStringParameters = event.queryStringParameters;
var pathParameters = event.pathParameters;
var stageVariables = event.stageVariables;
    
// Parse the input for the parameter values
var tmp = event.methodArn.split(':');
var apiGatewayArnTmp = tmp[5].split('/');
var awsAccountId = tmp[4];
var region = tmp[3];
var restApiId = apiGatewayArnTmp[0];
var stage = apiGatewayArnTmp[1];
var method = apiGatewayArnTmp[2];
var resource = '/'; // root resource
if (apiGatewayArnTmp[3]) {
    resource += apiGatewayArnTmp[3];
}
    
// Perform authorization to return the Allow policy for correct parameters and 
// the 'Unauthorized' error, otherwise.
var authResponse = {};
var condition = {};
condition.IpAddress = {};
 
if (//headers.headerauth1 === "headerValue1"
    queryStringParameters.QueryString1 === "queryValue1"
    //&& stageVariables.StageVar1 === "stageValue1"
    ){
    callback(null, generateAllow('me', event.methodArn));
}  else {
    callback("Unauthorized");
}
}
 
// Help function to generate an IAM policy
var generatePolicy = function(principalId, effect, resource) {
// Required output:
var authResponse = {};
authResponse.principalId = principalId;
if (effect && resource) {
    var policyDocument = {};
    policyDocument.Version = '2012-10-17'; // default version
    policyDocument.Statement = [];
    var statementOne = {};
    statementOne.Action = 'execute-api:Invoke'; // default action
    statementOne.Effect = effect;
    statementOne.Resource = resource;
    policyDocument.Statement[0] = statementOne;
    authResponse.policyDocument = policyDocument;
}
// Optional output with custom properties of the String, Number or Boolean type.
authResponse.context = {
    "stringKey": "stringval",
    "numberKey": 123,
    "booleanKey": true
};
return authResponse;
}
 
var generateAllow = function(principalId, resource) {
return generatePolicy(principalId, 'Allow', resource);
}
 
var generateDeny = function(principalId, resource) {
return generatePolicy(principalId, 'Deny', resource);
}
4

0 回答 0