awslabs/aws-amplify-identity-broker

Add security headers on Amplify distribution

Open

#26 opened on Nov 20, 2020

View on GitHubContributor guide
 (0 comments) (1 reaction) (0 assignees)JavaScript (69 forks)auto 404
good first issuehelp wanted

Repository metrics

Stars
 (217 stars)
PR merge metrics
 (No merged PRs in 30d)

Description

Amplify framework recently release a new feature that allow the user to inject some static headers from a Amplify hosted environment: https://docs.aws.amazon.com/amplify/latest/userguide/custom-headers.html

It will be nice to create such a file to inject HTTP headers where possible. Here is a reference of possible headers to inject: https://owasp.org/www-project-secure-headers/

Please add a small documentation section with this PR (maybe in the feature list, the dev doc and/or the user doc)

Contributor guide

Research direction
Review the AWS Amplify custom headers documentation and OWASP Secure Headers project. Identify which headers are applicable to the identity broker application. Create the custom headers file and update the feature list and developer/user documentation accordingly.
Tech stack
javascript
Domain
securitybackend
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
AWS Amplify
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65