[localstack-platform]

Add a GET /whoami route to the API Gateway SAM template and handler returning the caller's principalId. Update the Lambda authorizer to include the token name in its returned context object, and add assertions in test.sh for /whoami.

What changed

• template.yaml
• src/handler.js
• src/authorizer.js
• test.sh

Tests

• Run test.sh to verify GET /whoami returns status 200 and principalId 'user' when invoked with the 'allow' token.

Not verified here

• Whether LocalStack API Gateway correctly propagates authorizer context to the /whoami handler on deployment
• Whether test.sh succeeds against the local test stack
• The project has no platform CI workflow on its default branch, so no CI run checks this PR.

Drift noticed

None noticed.

Needs a human

None.

Turn 2: Remove duplicate token key from authorizer context

Plan approved by harsh · google/gemini-3.5-flash · commit 9948e7c

What changed

• src/authorizer.js

Tests

None requested.

Not verified here

• Whether the API Gateway authorizer context returned in event.requestContext.authorizer correctly contains only tokenName without token when deployed.

Drift noticed

None noticed.

Needs a human

None.

---

Built by LocalStack Build from a plan approved by harsh · session · turn 1 · google/gemini-3.5-flash