in lambda-authorizer/app.js [102:126]
var generatePolicy = function(principalId, effect, resource, claims) {
var authResponse = {};
authResponse.principalId = principalId;
if (effect && resource) {
var policyDocument = {};
policyDocument.Version = '2012-10-17';
policyDocument.Statement = [];
var statementOne = {};
statementOne.Action = 'execute-api:Invoke';
statementOne.Effect = effect;
statementOne.Resource = resource;
policyDocument.Statement[0] = statementOne;
authResponse.policyDocument = policyDocument;
}
// 以下代码用于从Cognito User Pool向Authing迁移时使用:
// authResponse.context = {
// //目前自定义的context不支持直接传入JSON Object,需要先stringify,并在Lambda中parse后进行访问。
// "claims" : JSON.stringify(claims)
// };
return authResponse;
}