wip

2025-08-05 21:14:09 -03:00
parent 5c57da7ecb
commit f96ad67eeb
27 changed files with 1960 additions and 0 deletions
--- a/id.saladeaula.digital/template.yaml
+++ b/id.saladeaula.digital/template.yaml
@@ -0,0 +1,95 @@
+AWSTemplateFormatVersion: 2010-09-09
+Transform: AWS::Serverless-2016-10-31
+
+Parameters:
+  OAuth2Table:
+    Type: String
+    Default: betaeducacao-prod-users_d2o3r5gmm4it7j
+
+Globals:
+  Function:
+    CodeUri: app/
+    Runtime: python3.13
+    Tracing: Active
+    Architectures:
+      - x86_64
+    Layers:
+      - !Sub arn:aws:lambda:sa-east-1:336641857101:layer:layercake:90
+    Environment:
+      Variables:
+        TZ: America/Sao_Paulo
+        LOG_LEVEL: DEBUG
+        POWERTOOLS_LOGGER_SAMPLE_RATE: 0.1
+        POWERTOOLS_LOGGER_LOG_EVENT: true
+        DYNAMODB_PARTITION_KEY: id
+        DYNAMODB_SORT_KEY: sk
+        OAUTH2_TABLE: !Ref OAuth2Table
+        ISSUER: https://id.saladeaula.digital
+        JWT_SECRET: 7DUTFB1iLeSpiXvmxbOZim1yPVmQbmBpAzgscob0RDzrL2wVwRi1ti2ZSry7jJAf
+
+Resources:
+  HttpLog:
+    Type: AWS::Logs::LogGroup
+    Properties:
+      RetentionInDays: 90
+
+  HttpApi:
+    Type: AWS::Serverless::HttpApi
+    Properties:
+      CorsConfiguration:
+        AllowOrigins: ["*"]
+        AllowMethods: [GET, POST, OPTIONS]
+        AllowHeaders: [Content-Type, X-Requested-With, Authorization]
+
+  HttpApiFunction:
+    Type: AWS::Serverless::Function
+    Properties:
+      Handler: app.lambda_handler
+      LoggingConfig:
+        LogGroup: !Ref HttpLog
+      Policies:
+        - DynamoDBCrudPolicy:
+            TableName: !Ref OAuth2Table
+      Events:
+        Authorize:
+          Type: HttpApi
+          Properties:
+            Path: /authorize
+            Method: GET
+            ApiId: !Ref HttpApi
+        LoginForm:
+          Type: HttpApi
+          Properties:
+            Path: /login
+            Method: GET
+            ApiId: !Ref HttpApi
+        Login:
+          Type: HttpApi
+          Properties:
+            Path: /login
+            Method: POST
+            ApiId: !Ref HttpApi
+        OpenidConfiguration:
+          Type: HttpApi
+          Properties:
+            Path: /.well-known/openid-configuration
+            Method: GET
+            ApiId: !Ref HttpApi
+        Jwks:
+          Type: HttpApi
+          Properties:
+            Path: /jwks.json
+            Method: GET
+            ApiId: !Ref HttpApi
+        Token:
+          Type: HttpApi
+          Properties:
+            Path: /token
+            Method: GET
+            ApiId: !Ref HttpApi
+        UserInfo:
+          Type: HttpApi
+          Properties:
+            Path: /userinfo
+            Method: GET
+            ApiId: !Ref HttpApi