Publish Signed Request with airSlate SignNow

Make signed request

hello everyone my name is Barbour Magida I'm a software engineer in this short lecture series I will walk you through the process of creating sign requests to API gateway the technologies which I will use are typescript nor GS angular framework serverless framework AWS lambda and a Tobias API gateway at the end of this lecture series you would be able to answer the following questions how to create sign requests to API gateway how to create lambdas in AWS console how to create API is using AWS API gateway console how to create lambdas using serverless framework how to deploy an API using several s and how to create a basic angular application so let's start learning I will start by discussing the theory behind Amazon API gateway sign request then I will go to the AWS console and create API is and lambdas and give demos of different kind of services so let's start so this is the content which I will discuss in this lecture series so installed with with the API gateway sign request I'll give a brief introduction and then I will give different kind of steps how to generate the sign API gateway requests then I'll discuss the architecture of services which I will use in my demo and I will give a brief description of the application and the workflow which would be used for the sign API requests then I will go to AWS lambda console and create lambda functions then after that I'll go to API gateway console and then I'll create API is there and then I'll integrate lambda functions of it those api's furthermore I will demonstrate sign request in postman then I'll use a front-end angular application to demonstrate the sign request so here in this step I will create the angular application and then for creation of the authorization header I will use typescript nodejs and then I've used from a server last framework to deploy that API into AWS then I'll demonstrate the sign request in angular application so what are the API gateways sign requests so whenever you send a request to API gateway you basically sign the request so that AWS can identify who has sent this request so for the identification you actually create a digital signature of this request using the secret key and the access key and then that digital signature is part of the header of the request and then you send it to API gateway so let's understand this using this example for example here we have an application and we want to hit the API gateway and retrieve some item from that so whenever we send this request so we wanna sign this request so that means like we we want to create a digital signature of this request so this digital signature would be created using the secret key the access key this method and some of the parameter from the URL that is like canonical URI canonical query parameters hostname and Amazon date there is a specific format of that so then you create a hash using some cryptographic function and then you add that hash into the authorization header of this request and then you send this request to API gateway once API gate may receive that request so it recalculates that hash and then compare the hash which is sending the authorization header if both are same then the except then the request is accepted otherwise it is rejected I hope it will not too much confusing if it is so don't worry I will explain it again and again so the AWS documentation has divided design requests into different steps so I will go over different steps so here are these steps so first is to create a canonical request then create a string to sign then calculate the signature and finally add the authorization header to the request so let's go to each step in the next slides so in the first step the creation of the canonical request so basically whenever an HTTP request is sent to API gate where this is something like that so it has a method then it has a URL that has a hostname and then the query parameters then header like different kind of headers so if we want to convert it to the canonical request so how would we do that so in the AWS documentation they have given some pseudo code so the canonical request basically that is equal to HTTP request method that is in this case the GAT one and then the next line and then canonical URI the canonical URI is basically the part after comm and before this question mark so if there is any a path there so we added here in the canonical URI in this case it is empty so but we will use the forward slash / hair and the canonical query string is basically everything after the canonical URI that is a starting from action until our hair so the canonical headers those are all the headers which are included in the request so in this case those are host content type and XML on date and the sign headers are basically the strings of the titles like the host content type and XML on date but in the lower cases and those are separated by semicolons and at the end the the hash is created of the payload if any payload is included in the request then we create a hash using some cryptographic hash function and this is the example canonical request so here we have this method named get then this one is the canonical URI this one is a canonical query string this is canonical headers and this one is the sign headers and this one is hash and finally we create the hash of whole of the canonical requests using the hash function which would be used in the next step so the second step is create a string to sign so this is the pseudocode for string to sign that will use the algorithm the request date and time credential scope and the hash canonical request which is basically created in the previous step so here is the example so the algorithm is a WS 4-h Mac sha-256 in this case the request date and time is in this format and the credential scope it has a date region service name and AWS for request which is the basically signature version for and then at the end the hash canonical request which is created in the previous step so the next step is calculate the signature for calculating the signature we create the hash of different parameters so we will start from the secret key and then using the secret key we'll calculate the date then using both of date and secret key we calculate the region then we calculate service using all of the above and at the end we calculate signing using the K service region and date and secret and finally for a signature we use this string to sign and drive signing key so and finally we get this hash for the signature and in the fourth step we add all of the above information in the authorization header so this is the pseudocode for that so authorization here we add the algorithm name then the credential we use access key ID then the credential scope and the sign header we use all of the sign headers and at the end we add the signature over here which we calculated in the previous step so this is the example of the authorization header so it has this algorithm AWS for H max sha-256 for the credential access key ID and then selected credential scope date the region service name AWS for request and then for the sign headers like all of the header titles in small cases separated using the semicolon and at the end signature is added there so in the next slide I will discuss the architecture of this application that I would use for API gave me a sign request so I will use the angular application on the front end that that basically will call the API gateway it will send a HTTP requests and the API gateway is integrated with with two lambda functions both are written in OGS so there would be one get request that will interact with the get item lambda function and there is another request that would be the post request that we integrate with the save item lambda function so whenever we call the get item so first there would be another API so that would be the authorization API and the angular application will call that API and then get the header using another lambda function so then whenever this authorization header is returned then this authorization header is used as a header of this get item request and the same thing is done with this save item