Skip to content

Events RequestContext missing certificate information for new API Gateway mTLS functionality #337

Closed
@dum0nt73

Description

@dum0nt73

API Gateway now includes the ability to use mTLS (Mutual TLS) and provides the PEM for the client certificate presented to the Gateway to the Custom Authorizer so additional checks can be considered before authorization. As of v1.20.0 the Events Structs do not include this new information.

Request to add struct information to APIGatewayCustomAuthorizerRequestTypeRequestIdentity and APIGatewayV2HTTPRequestContext so it can be used for CRL checks and other validation on the request prior to authorization.

I have been able to test the addition of this information to the Events APIGatewayCustomAuthorizerRequestTypeRequestIdentity struct definitions and will be submitting a pull request as soon as I can test the APIGatewayV2HTTPRequestContext changes as well.

Information about the new context information can be found at the announcement link bellow.
https://aws.amazon.com/blogs/compute/introducing-mutual-tls-authentication-for-amazon-api-gateway/

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions