Feature Request: Enforce API Authorisers
- Dominant language
- Python
- Stars
- 11.1k
- Forks
- 1k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 2
Description
If you are developing in a team, it can be difficult to ensure that the correct Authoriser is always used for API endpoints. A useful feature would be something in the configuration that allows you enforce authorisers so that even if the developer forgets to add it, during the deploy process Chalice will add the authoriser. This would also save duplicitous authoriser declaration statements throughout the code
Contributor guide
Research direction
Start by tracing Chalice's configuration and deployment process for API endpoints and reviewing existing authoriser documentation. Clarify whether configuration should override or fill missing declarations, then define acceptance coverage for both explicitly authorised and unannotated endpoints.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, python
- Domain
- api, authorization, cloud
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100