@xube/kit-aws-auth-infrastructure 0.0.65 → 0.0.67

package/dist/api/login.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoginAPI = void 0;
 const aws_apigateway_1 = require("aws-cdk-lib/aws-apigateway");
+const aws_iam_1 = require("aws-cdk-lib/aws-iam");
 const aws_lambda_1 = require("aws-cdk-lib/aws-lambda");
 const aws_lambda_nodejs_1 = require("aws-cdk-lib/aws-lambda-nodejs");
 const constructs_1 = require("constructs");
@@ -16,8 +17,16 @@ class LoginAPI extends constructs_1.Construct {
             functionName: props.name,
         });
         props.authAPI.restAPI.root
-            .addResource("/login")
+            .addResource("login")
             .addMethod(aws_lambda_1.HttpMethod.POST, new aws_apigateway_1.LambdaIntegration(this.loginFunction));
+        const ssmPermission = new aws_iam_1.PolicyStatement({
+            actions: [
+                "ssm:GetParameter",
+                "ssm:GetParameters",
+            ],
+            resources: ["*"],
+        });
+        this.loginFunction.addToRolePolicy(ssmPermission);
     }
 }
 exports.LoginAPI = LoginAPI;

package/dist/api/signup.js

@@ -16,7 +16,7 @@ class SignUpAPI extends constructs_1.Construct {
             functionName: props.name,
         });
         props.authAPI.restAPI.root
-            .addResource("/signup")
+            .addResource("signup")
             .addMethod(aws_lambda_1.HttpMethod.POST, new aws_apigateway_1.LambdaIntegration(this.signupFunction));
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xube/kit-aws-auth-infrastructure",
-  "version": "0.0.65",
+  "version": "0.0.67",
   "description": "",
   "main": "dist/index.js",
   "scripts": {
@@ -17,15 +17,15 @@
   },
   "homepage": "https://github.com/XubeLtd/dev-kit#readme",
   "devDependencies": {
-    "@xube/kit-build": "^0.0.65"
+    "@xube/kit-build": "^0.0.67"
   },
   "dependencies": {
-    "@xube/kit-aws": "^0.0.65",
-    "@xube/kit-aws-auth": "^0.0.65",
-    "@xube/kit-aws-hooks": "^0.0.65",
-    "@xube/kit-aws-infrastructure": "^0.0.65",
-    "@xube/kit-constants": "^0.0.65",
-    "@xube/kit-log": "^0.0.65",
+    "@xube/kit-aws": "^0.0.67",
+    "@xube/kit-aws-auth": "^0.0.67",
+    "@xube/kit-aws-hooks": "^0.0.67",
+    "@xube/kit-aws-infrastructure": "^0.0.67",
+    "@xube/kit-constants": "^0.0.67",
+    "@xube/kit-log": "^0.0.67",
     "aws-cdk-lib": "^2.100.0",
     "aws-lambda": "^1.0.7",
     "constructs": "^10.3.0"

package/src/api/login.ts

@@ -1,7 +1,6 @@
 import { XubeRestAPI } from "@xube/kit-aws-infrastructure";
-import {
-  LambdaIntegration,
-} from "aws-cdk-lib/aws-apigateway";
+import { LambdaIntegration } from "aws-cdk-lib/aws-apigateway";
+import { PolicyStatement } from "aws-cdk-lib/aws-iam";
 import { HttpMethod, Runtime } from "aws-cdk-lib/aws-lambda";
 import { NodejsFunction } from "aws-cdk-lib/aws-lambda-nodejs";
 import { Construct } from "constructs";
@@ -15,11 +14,7 @@ export interface LoginAPIProps {
 export class LoginAPI extends Construct {
   loginFunction: NodejsFunction;
 
-  constructor(
-    scope: Construct,
-    id: string,
-    props: LoginAPIProps
-  ) {
+  constructor(scope: Construct, id: string, props: LoginAPIProps) {
     super(scope, id);
 
     this.loginFunction = new NodejsFunction(scope, id + "-login", {
@@ -29,7 +24,17 @@ export class LoginAPI extends Construct {
     });
 
     props.authAPI.restAPI.root
-      .addResource("/login")
+      .addResource("login")
       .addMethod(HttpMethod.POST, new LambdaIntegration(this.loginFunction));
+
+    const ssmPermission = new PolicyStatement({
+      actions: [
+        "ssm:GetParameter",
+        "ssm:GetParameters",
+      ],
+      resources: ["*"],
+    });
+
+    this.loginFunction.addToRolePolicy(ssmPermission);
   }
 }

package/src/api/signup.ts

@@ -29,7 +29,7 @@ export class SignUpAPI extends Construct {
     });
 
     props.authAPI.restAPI.root
-      .addResource("/signup")
+      .addResource("signup")
       .addMethod(HttpMethod.POST, new LambdaIntegration(this.signupFunction));
   }
 }