CODEWITHSUNDEEP
graphqlauthorizationaws-appsync
Ashik
Ashik

Reputation: 1259

Appsync GraphQL api Authorization with oidc

I am using OIDC protocol for authentication in Appsync. For authorization/role management I am using a custom server which I am calling from an Appsync function. The problem here is, if I do the authorization part, all of the the resolvers should be turned into PIPELINE. In my opinion that's a bad design. I was wondering if there is any alternative way to implement this. Thanks in advance.

Upvotes: 0

Views: 399

Answers (1)

Ionut Trestian
Ionut Trestian

Reputation: 5751

AppSync supports OpenID Connect as an authorization mechanism, you don't need to validate the JWT token yourself in a function. Is there a use case for which you need to do that?

Also, what you described by using pipeline resolvers where the first function validates the authorization information is the current recommended way for doing this.

Upvotes: 1

Related Questions