aws / aws/chalice

Feature Request: Enforce API Authorisers

Open
#1,745 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
11.1k
Forks
1k
Avg merge
1d 22h
Merged PRs (30d)
2

Description

If you are developing in a team, it can be difficult to ensure that the correct Authoriser is always used for API endpoints. A useful feature would be something in the configuration that allows you enforce authorisers so that even if the developer forgets to add it, during the deploy process Chalice will add the authoriser. This would also save duplicitous authoriser declaration statements throughout the code

Contributor guide

Open the contributing guide

Research direction

Start by tracing Chalice's configuration and deployment process for API endpoints and reviewing existing authoriser documentation. Clarify whether configuration should override or fill missing declarations, then define acceptance coverage for both explicitly authorised and unannotated endpoints.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, python
Domain
api, authorization, cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.