Implementing a custom authorizer

In the Securing an API Gateway with OpenID Connect recipe, we leveraged the Cognito authorizer that is provided by AWS. This is one of the advantages of using Cognito. However, this is not the only option. Sometimes we may want more control over the policy that is returned. In other cases, we may need to use a third-party tool such as Auth0 or Okta. In this recipe, we will show how to support these scenarios by implementing a custom authorizer.

Getting ready

You will need the Cognito user pool created in the Creating a federated identity pool recipe and the sample application created in the Implementing sign up, sign in, and sign out recipe to create the identity token used in this recipe.

...