@adobe/helix-deploy 6.1.0 → 6.2.0

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+# [6.2.0](https://github.com/adobe/helix-deploy/compare/v6.1.0...v6.2.0) (2022-01-28)
+
+
+### Features
+
+* allow to set authorizer identity sources ([#363](https://github.com/adobe/helix-deploy/issues/363)) ([b4b6e30](https://github.com/adobe/helix-deploy/commit/b4b6e30f5e35449c123fcfe38fde851223fd3d4f))
+
 # [6.1.0](https://github.com/adobe/helix-deploy/compare/v6.0.1...v6.1.0) (2022-01-25)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/helix-deploy",
-  "version": "6.1.0",
+  "version": "6.2.0",
   "description": "Library and Commandline Tools to build and deploy OpenWhisk Actions",
   "license": "Apache-2.0",
   "homepage": "https://github.com/adobe/helix-deploy#readme",

package/src/deploy/AWSConfig.js

@@ -26,6 +26,7 @@ export default class AWSConfig {
       parameterMgr: ['system', 'secret'],
       createAuthorizer: '',
       attachAuthorizer: '',
+      identitySources: ['$request.header.Authorization'],
     });
   }
 
@@ -37,6 +38,7 @@ export default class AWSConfig {
       .withAWSLambdaFormat(argv.awsLambdaFormat)
       .withAWSCreateAuthorizer(argv.awsCreateAuthorizer)
       .withAWSAttachAuthorizer(argv.awsAttachAuthorizer)
+      .withAWSIdentitySources(argv.awsIdentitySource)
       .withAWSCleanUpBuckets(argv.awsCleanupBuckets)
       .withAWSCleanUpIntegrations(argv.awsCleanupIntegrations)
       .withAWSCreateRoutes(argv.awsCreateRoutes)
@@ -93,6 +95,11 @@ export default class AWSConfig {
     return this;
   }
 
+  withAWSIdentitySources(value) {
+    this.identitySources = value;
+    return this;
+  }
+
   static yarg(yargs) {
     return yargs
       .group(['aws-region', 'aws-api', 'aws-role', 'aws-cleanup-buckets', 'aws-cleanup-integrations',
@@ -136,6 +143,12 @@ export default class AWSConfig {
           + 'Example: "helix-authorizer_${version}".',
         type: 'string',
       })
+      .option('aws-identity-source', {
+        description: 'Identity source to used when creating the authorizer',
+        type: 'string',
+        array: true,
+        default: ['$request.header.Authorization'],
+      })
       .option('aws-attach-authorizer', {
         description: 'Attach specified authorizer to routes during linking.',
         type: 'string',

package/src/deploy/AWSDeployer.js

@@ -757,6 +757,7 @@ export default class AWSDeployer extends BaseDeployer {
           ApiId,
           AuthorizerId,
           AuthorizerUri: `${AUTH_URI_PREFIX}${aliasArn}/invocations`,
+          IdentitySource: this._cfg.identitySources,
         }));
         this.log.info(chalk`{green ok}: updated authorizer: {blue ${res.Name}}`);
       } else {
@@ -767,7 +768,7 @@ export default class AWSDeployer extends BaseDeployer {
           AuthorizerUri: `${AUTH_URI_PREFIX}${aliasArn}/invocations`,
           AuthorizerResultTtlInSeconds: 0,
           EnableSimpleResponses: true,
-          IdentitySource: ['$request.header.Authorization'],
+          IdentitySource: this._cfg.identitySources,
           Name: authorizerName,
         }));
         AuthorizerId = res.AuthorizerId;