{"repo":"lmammino/oidc-authorizer","free":true,"listed":false,"github":"https://github.com/lmammino/oidc-authorizer","clone":"git clone https://github.com/lmammino/oidc-authorizer.git","description":"A high-performance Lambda authorizer for API Gateway that can validate OIDC tokens","language":"Rust","stars":59,"topics":["api","api-gateway","authorizer","aws","jwt","lambda","oidc","openid","openid-connect","rest-api"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"oidc-authorizer A high-performance token-based API Gateway authorizer Lambda that can validate OIDC-issued JWT tokens. 🤌 Use case This project provides an easy-to-install AWS Lambda function that can be used as a custom authorizer for AWS API Gateway. This authorizer can validate OIDC-issued JWT tokens and it can be used to secure your API endpoints using your OIDC provider of choice (e.g. Apple, Auth0, AWS Cognito, Azure AD / Microsoft Entra ID, Facebook, GitLab, Google, Keycloak, LinkedIn, Okta, Salesforce, Twitch, etc.). A diagram illustrating how this project can be integrated. A user sends an authenticated request to API Gateway. API Gateway is configured to use a custom lambda as an authorizer (THIS PROJECT!). The lambda talks with your OIDC provider to get the public key to validate the user token and responds to API Gateway to Allow or Deny the request. API Gateway currently exists in 2 flavours: HTTP APIs and REST APIs . As of today, only HTTP APIs implement a built-in JWT authorizer that supports OIDC-issued tokens. You might want to consider using this project in the following cases: - You are using REST APIs and you want to secure your endpoints using OIDC-issued tokens. For instance, if you want to build APIs that are only available in a private VPC, you are currently forced to use REST APIs. - You are using HTTP APIs but your OIDC provider gives you tokens that are not signed with the RSA algorithm (currently the only one supported by the built-in JWT authorize","default_branch":null,"files":null,"tree":[],"storefront":"/r/lmammino","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/lmammino/oidc-authorizer/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}