- The authorizer's runtime has been updated to Node 20.
- The default issuers have been changed.
- The authorizer's runtime has been updated to Node 18.
- BREAKING: The authorizer now supports multiple issuers.
- These are called ISSUERS now, deprecating AUTHORITY.
- The authorizer's deployment size has been significantly reduced due to new depdendencies.
- The
sub
of the JWT is supplied as theusageIdentifierKey
for rate-limiting and other purposes. - The conditions of the permissions to decrypt environment variables (if environment variables are encrypted) conforms to new AWS advice.
- The authorizer's runtime has been updated to Node 14.
- The authorizer's runtime has been updated to Node 12.
- The application optionally accepts the ARN of a KMS key with which to encrypt Lambda Function environment variables.
- The authorizer's runtime has been updated to Node 10.
- Performance improvements have been applied, such no longer needing to decode a token twice.
- The authorizer is now available on the Serverless Application Repository.
- The authorizer's runtime has been updated to Node 8.
- The authorizer now uses CloudTrail to gather metrics.
- The authorizer can be used with API Gateway caching.
- Everything is new!