{"action":"created","issue":{"url":"https://api.github.com/repos/dherault/serverless-offline/issues/41","repository_url":"https://api.github.com/repos/dherault/serverless-offline","labels_url":"https://api.github.com/repos/dherault/serverless-offline/issues/41/labels{/name}","comments_url":"https://api.github.com/repos/dherault/serverless-offline/issues/41/comments","events_url":"https://api.github.com/repos/dherault/serverless-offline/issues/41/events","html_url":"https://github.com/dherault/serverless-offline/issues/41","id":153572601,"number":41,"title":"authorizer function support","user":{"login":"aliatsis","id":4140524,"avatar_url":"https://avatars.githubusercontent.com/u/4140524?v=3","gravatar_id":"","url":"https://api.github.com/users/aliatsis","html_url":"https://github.com/aliatsis","followers_url":"https://api.github.com/users/aliatsis/followers","following_url":"https://api.github.com/users/aliatsis/following{/other_user}","gists_url":"https://api.github.com/users/aliatsis/gists{/gist_id}","starred_url":"https://api.github.com/users/aliatsis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aliatsis/subscriptions","organizations_url":"https://api.github.com/users/aliatsis/orgs","repos_url":"https://api.github.com/users/aliatsis/repos","events_url":"https://api.github.com/users/aliatsis/events{/privacy}","received_events_url":"https://api.github.com/users/aliatsis/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2016-05-07T04:21:36Z","updated_at":"2016-05-19T09:34:22Z","closed_at":null,"body":"It would be great to add support for customer authorizer functions so I can simulate authorization/authentication locally."},"comment":{"url":"https://api.github.com/repos/dherault/serverless-offline/issues/comments/220274763","html_url":"https://github.com/dherault/serverless-offline/issues/41#issuecomment-220274763","issue_url":"https://api.github.com/repos/dherault/serverless-offline/issues/41","id":220274763,"user":{"login":"johncmckim","id":1297227,"avatar_url":"https://avatars.githubusercontent.com/u/1297227?v=3","gravatar_id":"","url":"https://api.github.com/users/johncmckim","html_url":"https://github.com/johncmckim","followers_url":"https://api.github.com/users/johncmckim/followers","following_url":"https://api.github.com/users/johncmckim/following{/other_user}","gists_url":"https://api.github.com/users/johncmckim/gists{/gist_id}","starred_url":"https://api.github.com/users/johncmckim/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/johncmckim/subscriptions","organizations_url":"https://api.github.com/users/johncmckim/orgs","repos_url":"https://api.github.com/users/johncmckim/repos","events_url":"https://api.github.com/users/johncmckim/events{/privacy}","received_events_url":"https://api.github.com/users/johncmckim/received_events","type":"User","site_admin":false},"created_at":"2016-05-19T09:34:22Z","updated_at":"2016-05-19T09:34:22Z","body":"How far should this go in validating the result of the Authorization function? So far with the pull request I've created it check checks for `err` and `data`. Is it worth going into checking wether or not the endpoint matches the resources specified in the policy document?\r\n\r\nThe `methodArn` on the `event` object requires a `<Account id>` and `<API id>` (API Gateway ID). Any idea of ways to deal with those? Will dummy values be enough?\r\n\r\nFor my purposes right now, I don't need to validate the policy document or use the Account ID and API ID. Though I'm not doing anything complicated. @aliatsis what do you think?"}}