add option to pass access token in a header (AnomalyInnovations#6)

* add option to pass access token in a header

* Update readme

* took out es6 object destructuring assignment and switched back to not stringify output

Author: jwoptio

README.md

@@ -27,6 +27,7 @@ $ apig-test \
   --method='GET' \
   --params='{}' \
   --additional-params='{}' \
+  --access-token-header='cognito-access-token' \
   --body='{}'
 ```
 
@@ -71,6 +72,9 @@ This command takes the following options:
 - `additional-params`
   Any additional params (including the querystring) as a JSON string. Defaults to `'{}'`.
 
+- `access-token-header`
+  Header field on which to pass the access token.
+
 - `body`
   The request body as a JSON string. Defaults to `'{}'`.
 

index.js

@@ -69,6 +69,9 @@ var argv = require("yargs")
     describe: "API request body",
     default: "{}"
   })
+  .option("access-token-header", {
+    describe: "Header to use to pass access token with request"
+  })
   .help("h")
   .alias("h", "help")
   .alias("v", "version")
@@ -102,7 +105,10 @@ function authenticate(callback) {
 
   cognitoUser.authenticateUser(authenticationDetails, {
     onSuccess: function(result) {
-      callback(result.getIdToken().getJwtToken());
+      callback({
+        idToken: result.getIdToken().getJwtToken(),
+        accessToken: result.getAccessToken().getJwtToken()
+      });
     },
     onFailure: function(err) {
       console.log(err.message ? err.message : err);
@@ -119,14 +125,16 @@ function authenticate(callback) {
   });
 }
 
-function getCredentials(userToken, callback) {
+function getCredentials(userTokens, callback) {
   console.log("Getting temporary credentials");
 
   var logins = {};
+  const idToken = userTokens.idToken;
+  const accessToken = userTokens.accessToken;
 
   logins[
     "cognito-idp." + argv.cognitoRegion + ".amazonaws.com/" + argv.userPoolId
-  ] = userToken;
+  ] = idToken;
 
   AWS.config.credentials = new AWS.CognitoIdentityCredentials({
     IdentityPoolId: argv.identityPoolId,
@@ -139,11 +147,11 @@ function getCredentials(userToken, callback) {
       return;
     }
 
-    callback();
+    callback(userTokens);
   });
 }
 
-function makeRequest() {
+function makeRequest(userTokens) {
   console.log("Making API request");
 
   var apigClient = apigClientFactory.newClient({
@@ -159,6 +167,12 @@ function makeRequest() {
   var additionalParams = JSON.parse(argv.additionalParams);
   var body = JSON.parse(argv.body);
 
+  if (argv.accessTokenHeader) {
+    const tokenHeader = {};
+    tokenHeader[argv.accessTokenHeader] = userTokens.accessToken;
+    additionalParams.headers = Object.assign({}, additionalParams.headers, tokenHeader);
+  }
+
   apigClient
     .invokeApi(params, argv.pathTemplate, argv.method, additionalParams, body)
     .then(function(result) {
@@ -181,6 +195,6 @@ function makeRequest() {
     });
 }
 
-authenticate(function(token) {
-  getCredentials(token, makeRequest);
+authenticate(function(tokens) {
+  getCredentials(tokens, makeRequest);
 });