LambdaのオーソライザーでBASIC認証を追加する【言語不問】

An error occurred: ApiGatewayResourceUuidVarhtml - Resource's path part only allow a-zA-Z0-9._- and curly braces at the beginning and the end. 

$ # https://github.com/umihico/authorizer-demo/commit/c0d1263
$ mkdir authorizer-demo
$ cd authorizer-demo
$ serverless create --template aws-nodejs --name authorizer-demo　#プロジェクト作成

functions:
  hello:
    handler: handler.hello
+     events:
+       - http:
+           path: hello
+           method: get
#    The following are a few example events you can configure
#    NOTE: Please make sure to change your handler code to work with those events
#    Check the event documentation for details

$ serverless deploy
$ curl https://7xcxsu7mp5.execute-api.us-east-1.amazonaws.com/dev/hello
{message: "Go Serverless v1.0! Your function executed successfully!",input: {省略}}

'use strict';


+ module.exports.auth = (event, context, callback) => {
+     var token = event.headers["Authorization"];
+     if (token == 'password') {
+         callback(null, {
+             principalId: 'user',
+             policyDocument: {
+                 Version: '2012-10-17',
+                 Statement: [{
+                     Action: 'execute-api:Invoke',
+                     Effect: 'Allow',
+                     Resource: "*",
+                 }]
+             }
+         });
+     } else {
+         callback('Unauthorized');
+     }
+ };

module.exports.hello = async event => {
  return {
    statusCode: 200,

 - http:
    path: hello
    method: get
+     authorizer:
+       name: auth
+       resultTtlInSeconds: 0
+       type: request
+ auth:
+ handler: handler.auth
#    The following are a few example events you can configure
#    NOTE: Please make sure to change your handler code to work with those events
#    Check the event documentation for details

$ curl https://7xcxsu7mp5.execute-api.us-east-1.amazonaws.com/dev/hello
{message: "Unauthorized"}
$ curl --header "Authorization: password" https://7xcxsu7mp5.execute-api.us-east-1.amazonaws.com/dev/hello
{message: "Go Serverless v1.0! Your function executed successfully!",input: {省略}}
$ curl --header "Authorization: dummy" https://7xcxsu7mp5.execute-api.us-east-1.amazonaws.com/dev/hello
{message: "Unauthorized"}

'use strict';

module.exports.auth = (event, context, callback) => {
-     var token = event.headers["Authorization"];
-     if (token == 'password') {
+     let Authorization = event.headers.Authorization;
+     if (!Authorization) return callback('Unauthorized');
+     let [username, password] = (new Buffer(Authorization.split(' ')[1], 'base64')).toString().split(':');
+     if (username === 'admin' && password === 'secret4') {
        callback(null, {
            principalId: 'user',
            policyDocument: {

#    environment:
#      variable2: value2

+ resources:
+   Resources:
+     GatewayResponse:
+       Type: 'AWS::ApiGateway::GatewayResponse'
+       Properties:
+         ResponseParameters:
+           gatewayresponse.header.WWW-Authenticate: "'Basic'"
+         ResponseType: UNAUTHORIZED
+         RestApiId:
+           Ref: 'ApiGatewayRestApi'
+         StatusCode: '401'
# you can add CloudFormation resource templates here
#resources:
#  Resources: