(apigatewayv2): Allow to set Lambda authorizer for WebSocket API

Please allow us to set a Lambda authorizer for a WebSocket API. Currently we cannot set it because there’s no interface for it.

Use Case

Restrict access to a WebSocket API by cognito auth or other auth method.

Proposed Solution

Setting an authorizer for a WebSocket API is simple. You must only set authorizationType and authorizerId when creating a CfnRoute to $connect https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-route.html

Because you can only set authorizer for $connect route.

And there’s only one authorizer type; LambdaAuthorizer.

Other

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[tmokmss]

@wakeupmh Hi, here’s an example for that. https://github.com/aws-samples/websocket-api-cognito-auth-sample/tree/main/cdk

You have to create a Lambda function to verify JWTs (implementation is very simple thanks to aws-jwt-veryfy lib), and use the function as a Lambda authorizer.

[tmokmss]

Also there is a sample for adding Lambda authorizer to a WebSocket API written in TypeScript. https://github.com/aws-samples/websocket-api-cognito-auth-sample/blob/main/cdk/lib/construct/websocket.ts