Revert "feat: remove unneeded scope checks in authorizer (#347)"

This reverts commit e0e9364.
awslabs · Jun 14, 2021 · d103ad0 · d103ad0
1 parent e0e9364
commit d103ad0
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/serverless.yaml b/serverless.yaml
@@ -81,13 +81,21 @@ functions:
           authorizer:
             type: COGNITO_USER_POOLS
             authorizerId: !Ref ApiGatewayAuthorizer
+            scopes: # must have both scopes
+              - 'openid'
+              - 'profile'
+              - 'aws.cognito.signin.user.admin'
           method: ANY
           path: /
           private: true
       - http:
           authorizer:
             type: COGNITO_USER_POOLS
             authorizerId: !Ref ApiGatewayAuthorizer
+            scopes: # must have both scopes
+              - 'openid'
+              - 'profile'
+              - 'aws.cognito.signin.user.admin'
           method: ANY
           path: '{proxy+}'
           private: true