Merge pull request #17 from AikidoSec/dev

Dev

.github/workflows/build-and-release.yml

@@ -19,6 +19,7 @@ jobs:
         run: echo ::set-output name=tag::${GITHUB_REF/refs\/tags\//}
       - run: cd library && npm --no-git-tag-version version ${{ steps.get_version.outputs.tag }}
       - run: make build
+      - run: cp LICENSE library && cp README.md library
       - run: cd library && npm publish --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}

docs/lambda.md

@@ -11,7 +11,7 @@ const dependency = require("dependency");
 
 preventPrototypePollution(); // <-- Call this after your main imports
 
-exports.handler = protect(async (event, context) => {
+exports.handler = protect(async (event, context) => { // <-- Wrap your handler with protect
   // ...
 });
 ```
@@ -27,8 +27,7 @@ import { lambda, preventPrototypePollution } from '@aikidosec/guard';
 In order for the guard to work properly, we need the following event properties to be present:
 
 * `event.body`
-* `event.httpMethod` (optional)
-* `event.headers` (optional)
+* `event.headers`
 
 That's it! Your AWS Lambda function is now protected by Aikido guard.
 

library/src/sources/Lambda.ts

@@ -89,12 +89,7 @@ function isJsonContentType(contentType: string) {
 }
 
 function isProxyEvent(event: unknown): event is APIGatewayProxyEvent {
-  return (
-    isPlainObject(event) &&
-    "httpMethod" in event &&
-    "requestContext" in event &&
-    "headers" in event
-  );
+  return isPlainObject(event) && "httpMethod" in event && "headers" in event;
 }
 
 export function createLambdaWrapper<