'identitySource' needs to accept array of headers in TokenAuthorizer

[rampatina]

Use Case

Getting below error if I pass array of headers as we need to provide for 'identitySource' in 'TokenAuthorizer'.
Invalid token source expression: method.request.header.authorization, method.request.header.appkey. The source must be a method request header, matching 'method.request.header.[a-zA-Z0-9._-]+'

Example token authorizer which we tried:

const customAuth1 = new apigw.TokenAuthorizer(this, 'customAuthorizer1', {
      handler: customAuthorizer.jwtValidatorConstruct.handler,
      identitySource: 'method.request.header.authorization,method.request.header.appkey',
      resultsCacheTtl: resultTtlInSeconds,
      authorizerName: 'customAuthorizer1'
    });

Proposed Solution

Other

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[nija-at]

From what I can tell from the documentation, token based authorizers don't support only a single header. This is consistent with the documented input protocol for the lambda function that backs the token authorizer - the value of the specified header is part of authorizationToken key in the function's input.

If you're instead looking for the request authorizer, that's currently being implemented in #5642.