3 ms·
They say "If you already utilize OAuth tokens or any other authorization mechanism, you can easily setup API Gateway not to require signed API calls and simply
by intrasight 11y ago
They say "If you already utilize OAuth tokens or any other authorization mechanism, you can easily setup API Gateway not to require signed API calls and simply forward the token headers to your backend for verification." It would be nice if AWS would stand up an authentication service that could handle oauth. Or do they already have such a thing?
- fosk 11y agoKong[1] is releasing OAuth 2.0 support in a week or so (when 0.4.0 will be announced). You will see it appear in the plugin gallery[2] [1] https://github.com/mashape/kong https://github.com/mashape/kong [2] http://getkong.org/plugins/ http://getkong.org/plugins/
- joeyspn 11y agoThey say we can use Amazon Cognito[0]. I hope they put some examples with ACL and Role management (I wonder if this could live in lambda functions using packages like node_acl) [0] http://aws.amazon.com/cognito/ http://aws.amazon.com/cognito/