blob: cc9bdc5c6703148b41234a01d91824cac95c2a15 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
service: serverless-oauth2
provider:
name: aws
runtime: nodejs6.10
stage: ${opt:stage, self:custom.defaultStage}
environment:
GIT_HOSTNAME: "/ctrl-alt-del/oauth/${opt:stage, self:provider.stage}/GIT_HOSTNAME"
OAUTH_TOKEN_PATH: "/ctrl-alt-del/oauth/${opt:stage, self:provider.stage}/OAUTH_TOKEN_PATH"
OAUTH_AUTHORIZE_PATH: "/ctrl-alt-del/oauth/${opt:stage, self:provider.stage}/OAUTH_AUTHORIZE_PATH"
OAUTH_CLIENT_ID: "/ctrl-alt-del/oauth/${opt:stage, self:provider.stage}/OAUTH_CLIENT_ID"
OAUTH_CLIENT_SECRET: "/ctrl-alt-del/oauth/${opt:stage, self:provider.stage}/OAUTH_CLIENT_SECRET"
REDIRECT_URL: "/ctrl-alt-del/oauth/${opt:stage, self:provider.stage}/REDIRECT_URL"
OAUTH_SCOPES: "/ctrl-alt-del/oauth/${opt:stage, self:provider.stage}/OAUTH_SCOPES"
TZ: "utc"
iamRoleStatements:
- Effect: Allow
Action:
- ssm:DescribeParameters
- ssm:GetParameters
Resource: "arn:aws:ssm:${opt:region, self:provider.region}:*:parameter/ctrl-alt-del/oauth/${opt:stage, self:provider.stage}/*"
- Effect: Allow
Action:
- kms:Decrypt
Resource: "arn:aws:kms:${opt:region, self:provider.region}:*:key/${self:custom.kms_key.${opt:region, self:provider.region}.${self:provider.stage}}"
custom:
defaultStage: dev
kms_key:
"us-east-1":
prod: "01660d80-64fb-4444-9b21-bb15ac2f97ec"
dev: "foo"
functions:
auth:
handler: auth.auth
memorySize: 128
timeout: 5
events:
- http:
path: /auth
method: get
cors: true
callback:
handler: auth.callback
memorySize: 128
timeout: 5
events:
- http:
path: /callback
method: get
cors: true
success:
handler: auth.success
memorySize: 128
timeout: 5
events:
- http:
path: /success
method: get
cors: true
default:
handler: auth.default
memorySize: 128
timeout: 5
events:
- http:
path: /
method: get
cors: true
plugins:
- serverless-plugin-optimize
- serverless-offline
package:
individually: true
|
