​

Overview

​

Prerequisites

• You have a lambda function GetHelloWorld that returns {"Hello":"World"}.
• You have /mydemoresource resource that supports GET method on Amazon API Gateway.
• You have a service in Authlete. A service is created automatically on sign-up and you can use it.
• You have a client application in Authlete. A client application is created automatically on sign-up and you can use it.

​

Quick Guide

​

Setup

1. [API Gateway] Complete steps in Getting Started with Amazon API Gateway
2. [Authlete] Complete steps in Getting Started
3. [Lambda] Renew GetHelloWorld lambda function

    $ mkdir gethelloworld
    $ cd gethelloworld
    $ npm install async request

    $ vi index.js  # Replace api_key and api_secret.

    { "access_token": "$input.params('access_token')" }

7. [Amazon API Gateway] [Method Response] Add 400, 401, 403 and 500 as HTTP status codes
8. [Amazon API Gateway] [Integration Response] Set mappings as shown below

   Lambda Error Regex	Method response status
   BAD_REQUEST:*	400
   UNAUTHORIZED:.*	401
   FORBIDDEN:.*	403
   INTERNAL_SERVER_ERROR:.*	500

​

Try OAuth 2.0 Flow

1. Issue an access token Authlete does not host an authorization server, so issue an access token for your service to test the integration. The quickest way is Authlete’s Create Access Token API (/api/{Service ID}/auth/token/create), which mints an access token without running a full OAuth flow. Replace <Service ID>, <Service Access Token> and <Client ID> with your own values, and set subject and scopes to values supported by your service.

    curl -v -X POST https://us.authlete.com/api/<Service ID>/auth/token/create \
    -H 'Content-Type: application/json' \
    -H 'Authorization: Bearer <Service Access Token>' \
    -d '{ "grantType": "AUTHORIZATION_CODE", "clientId": <Client ID>, "subject": "john", "scopes": [ "read" ] }'

    {
        "action": "OK",
        "accessToken": "Z5a40U6dWvw2gMoCOAFbZcM85q4HC0Z--0YKD9-Nf6Q",
        "clientId": 26888344961664,
        "subject": "john",
        "tokenType": "Bearer",
        "expiresIn": 3600
    }

2. Access /mydemoresource endpoint with an access token Access the URL below with your browser. Don’t forget to replace your-api-id, region-id and your-access-token with your own.

    https://your-api-id.execute-api.region-id.amazonaws.com/test/mydemoresource?access_token=your-access-token

    {
    "Hello": "World",
    "clientId": 4326385670,
    "subject": "authlete_5526908833"
    }