arc-macro-auth

Use JWT authentication with Architect HTTP APIs.

Ok..How?!

Install:

npm i arc-macro-auth

And add to your .arc-file:

@app
myapp

@auth
issuer https://example.auth0.com/ #Issuer of JWT
audience https://example.com,https://example2.com #Audience in the JWT
identitySource $request.header.Authorization #Where is the token source
scopes read:foo,write:foo #Not required
default false #Set to true to secure all routes (--auth flags in @http are ignored)

@http
get / #Not secured
get /foo --auth #Secured with default scopes
get /bar --auth read:bar,... #Secured with specified scopes

@macros
architect/macro-http-api #Required until HTTP APIs are default in arc
arc-macro-auth

See AWS::Serverless::HttpApi/HttpApiAuth for more information.