update

formkiq · Oct 6, 2023 · 2eb717c · 2eb717c
1 parent 2460009
commit 2eb717c
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 1 deletion.
diff --git a/fkq-lambda-core/src/main/java/com/formkiq/aws/services/lambda/ApiAuthorizationBuilder.java b/fkq-lambda-core/src/main/java/com/formkiq/aws/services/lambda/ApiAuthorizationBuilder.java
@@ -335,7 +335,10 @@ private Collection<String> loadJwtGroups(final ApiGatewayRequestEvent event) {
       }
     }
 
-    groups.remove("authentication_only");
+    if (groups.contains("authentication_only")) {
+      groups.clear();
+    }
+
     return groups;
   }
 }
diff --git a/...ambda-core/src/test/java/com/formkiq/aws/services/lambda/ApiAuthorizationBuilderTest.java b/...ambda-core/src/test/java/com/formkiq/aws/services/lambda/ApiAuthorizationBuilderTest.java
@@ -419,4 +419,24 @@ void testApiAuthorizer12() throws Exception {
         api0.permissions().stream().map(p -> p.name()).collect(Collectors.joining(",")));
     assertEquals("no groups", api0.accessSummary());
   }
+
+  /**
+   * Basic 'authentication_only' access.
+   */
+  @Test
+  void testApiAuthorizer13() throws Exception {
+    // given
+    String s0 = "[finance authentication_only]";
+    ApiGatewayRequestEvent event0 = getJwtEvent(s0);
+
+    // when
+    ApiAuthorization api0 = new ApiAuthorizationBuilder().build(event0);
+
+    // then
+    assertNull(api0.siteId());
+    assertEquals("", String.join(",", api0.siteIds()));
+    assertEquals("",
+        api0.permissions().stream().map(p -> p.name()).collect(Collectors.joining(",")));
+    assertEquals("no groups", api0.accessSummary());
+  }
 }