(api-gateway): StepFunctionsIntegration doesnt pass Cognito claims with authorizer:true

[gmborisov]

Current StepfunctionIntegreation vtl script for integration request mapping doesnt support Cognito claims in authorization context.
#if ($includeAuthorizer) #set($inputString = "$inputString, @@authorizer@@:{") #foreach($paramName in $context.authorizer.keySet()) #set($inputString = "$inputString @@$paramName@@: @@$util.escapeJavaScript($context.authorizer.get($paramName))@@") #if($foreach.hasNext) #set($inputString = "$inputString,") #end #end #set($inputString = "$inputString }") #end

If I specify just the 'claims' in the forloop, then I will get all details:
#if ($includeAuthorizer) #set($inputString = "$inputString, @@authorizer@@:{") #foreach($paramName in $context.authorizer.claims.keySet()) #set($inputString = "$inputString @@$paramName@@: @@$util.escapeJavaScript($context.authorizer.claims.get($paramName))@@") #if($foreach.hasNext) #set($inputString = "$inputString,") #end #end #set($inputString = "$inputString }") #end

Expected Behavior

Stepfunction input contains all Cognito claims inside 'authorizer' object

Current Behavior

The authorizer.claims object is empty:

Reproduction Steps

1. Create Cognito user pool
2. Create RestApi with StepFunctionsIntegration for a resource method
3. Specify authorizerType = Cognito and provide a link to the created pool
4. specify authorizer: true

Possible Solution

iterate over claims separately.

Additional Information/Context

No response

CDK CLI Version

2.102.0 (build 2abc59a)

Framework Version

No response

Node.js Version

20.5.1

OS

Windows 11 Pro

Language

TypeScript

Language Version

No response

Other information

No response

[ashishdhingra]

@gmborisov Good morning. Thanks for opening the issue. Could you please elaborate the issue by providing the minimal reproducible CDK code, which confirms that this is the issue with CDK?

Thanks,
Ashish

[github-actions]

This issue has not received a response in a while. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.

[aws-cdk-automation]

Comments on closed issues and PRs are hard for our team to see. If you need help, please open a new issue that references this one.