AWS API Gateway Custom Authorizer is not invoked when executing API Method

Question

I'm using AWS lambda serverless WEB API application. My controller having one method that simply returns some string value. I want to add an authentication layer which authenticates the requester. The requester should pass "Authorizer" key to the header to authenticate.

This article help me to do so. I used this example.

I created one Custom Authorizer lambda which authenticates the user passed in the header of API request. Buth my Custom Authorizer is not calling when I hit API URL. Below is my Custom Authorizer lambda function code

public APIGatewayCustomAuthorizerResponse FunctionHandler(APIGatewayCustomAuthorizerRequest apigAuthRequest, ILambdaContext context)
    {


        Console.WriteLine("1");

        bool ok = false;

        if (apigAuthRequest.Headers["Authorization"] == "test")
        {
            ok = true;
            Console.WriteLine("2");
        }
        return new APIGatewayCustomAuthorizerResponse
        {
            PrincipalID = "test",
            PolicyDocument = new APIGatewayCustomAuthorizerPolicy
            {
                Version = "2012-10-17",
                Statement = new List<APIGatewayCustomAuthorizerPolicy.IAMPolicyStatement>() {
                  new APIGatewayCustomAuthorizerPolicy.IAMPolicyStatement
                  {
                       Action = new HashSet<string>(){"execute-api:Invoke"},
                       Effect = ok ? "Allow" : "Deny",
                       Resource = new HashSet<string>(){ apigAuthRequest.MethodArn } // resource arn here
                  }
            },
            }
        };

    }

I'm expecting that this function should call when I invoke my API.

Below is the screenshot of AWS Console --> API Gateway where I configured custom authorizer for my API.

Why my authorizer is not called when I hit API URL.

How do you know it is not called? What do you expect to see? and what's the actual response? — A.Khan
– A.Khan, Commented Feb 5, 2019 at 20:59
How do you know it is not called -- There should be cloudwatch logs when authorizer lambda function called. But no logs there. What do you expect to see -- I'm expecting that my API should not return output if custom-authorizer is not valid or Deny. what's the actual response -- API controller method return a string value. But as custom-authorizer is placed, it should not return string value if custom-authorizer return Deny response. — NETGeek
– NETGeek, Commented Feb 6, 2019 at 7:03

Vladyslav Usenko · Accepted Answer · 2019-02-20 12:03:52Z

7

Custom authorizers start to work only after you deploy a stage. Make sure you deployed yours.

answered Feb 20, 2019 at 12:03

Vladyslav Usenko

2,40612 silver badges19 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

NETGeek Over a year ago

Arghhh.... How I missed it!!!.. I forgot to deploy it. And after deploy it works for me.

Vladyslav Usenko Over a year ago

Awesome! Good to hear :)

Collectives™ on Stack Overflow

AWS API Gateway Custom Authorizer is not invoked when executing API Method

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related