@@ -28,6 +28,8 @@ import {
28
28
} from '@src/utils' ;
29
29
import middy from '@middy/core' ;
30
30
import cors from '@middy/http-cors' ;
31
+ import createDefaultLogger from '@src/logger' ;
32
+ import { Logger } from 'winston' ;
31
33
32
34
const EXPIRATION_TIME_IN_SECONDS = 1800 ;
33
35
@@ -155,7 +157,7 @@ export const tokenHandler: APIGatewayProxyHandler = middy(async (event) => {
155
157
/**
156
158
* Generates a aws policy document to allow/deny access to the resource
157
159
*/
158
- const _generatePolicy = ( principalId : string , effect : string , resource : string ) => {
160
+ const _generatePolicy = ( principalId : string , effect : string , resource : string , logger : Logger ) => {
159
161
const resourcePrefix = `${ resource . split ( '/' ) . slice ( 0 , 2 ) . join ( '/' ) } /*` ;
160
162
const policyDocument : PolicyDocument = {
161
163
Version : '2012-10-17' ,
@@ -182,12 +184,12 @@ const _generatePolicy = (principalId: string, effect: string, resource: string)
182
184
authResponse . context = context ;
183
185
184
186
// XXX: to get the resulting policy on the logs, since we can't check the cached policy
185
- // eslint-disable-next-line
186
- console . info ( 'Generated policy:' , authResponse ) ;
187
+ logger . info ( 'Generated policy:' , authResponse ) ;
187
188
return authResponse ;
188
189
} ;
189
190
190
191
export const bearerAuthorizer : APIGatewayTokenAuthorizerHandler = middy ( async ( event ) => {
192
+ const logger = createDefaultLogger ( ) ;
191
193
const { authorizationToken } = event ;
192
194
if ( ! authorizationToken ) {
193
195
throw new Error ( 'Unauthorized' ) ; // returns a 401
@@ -210,8 +212,7 @@ export const bearerAuthorizer: APIGatewayTokenAuthorizerHandler = middy(async (e
210
212
} else if ( e . name === 'TokenExpiredError' ) {
211
213
throw new Error ( 'Unauthorized' ) ;
212
214
} else {
213
- // eslint-disable-next-line
214
- console . log ( 'Error on bearerAuthorizer: ' , e ) ;
215
+ logger . warn ( 'Error on bearerAuthorizer: ' , e ) ;
215
216
throw e ;
216
217
}
217
218
}
@@ -227,8 +228,8 @@ export const bearerAuthorizer: APIGatewayTokenAuthorizerHandler = middy(async (e
227
228
const verified = verifySignature ( signature , timestamp , address , walletId ) ;
228
229
229
230
if ( verified && Math . floor ( Date . now ( ) / 1000 ) <= expirationTs ) {
230
- return _generatePolicy ( walletId , 'Allow' , event . methodArn ) ;
231
+ return _generatePolicy ( walletId , 'Allow' , event . methodArn , logger ) ;
231
232
}
232
233
233
- return _generatePolicy ( walletId , 'Deny' , event . methodArn ) ;
234
+ return _generatePolicy ( walletId , 'Deny' , event . methodArn , logger ) ;
234
235
} ) . use ( cors ( ) ) ;
0 commit comments