Websocket authorzation handler - return something that isn't `500`?

先从 $connect 的 WebSocket 配置和 authHandler 的返回值入手，然后将它们与 API Gateway authorizer 契约以及观察到的 500 响应进行比较。对于此示例，确定支持的错误状态和 TypeScript handler 类型，并为缺少 secret 的请求提供可复现的检查，即视为完成。

Question / help needed

I'm trying to get authorization working before connecting to websockets, which works, but I'm struggling to return an error message that isn't 500.

I've managed to make an auth handler, like so:

    connectHandler: {
      handler: 'handler.connectHandler',
      events: [
        {
          "websocket": {
            route: "$connect",
            authorizer: {
              name: "authHandler",
              identitySource: [
                // No identity source, leave it up to the handler
              ],
            },
          },
        },
      ],
      environment: {
        // ..
      },
    },

Any my authHandler:

export const authHandler = async (event, _context) => {
  console.log('🔑 Auth request received', event.requestContext)

  const token = event.headers.Authorization ?? event.queryStringParameters.Authorization;
  console.log('Token:', token)

  if (token !== 'secret') {
    return {
      statusCode: 401,
    }
  }

  return {
    "principalId": "user",
    "policyDocument": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": "execute-api:Invoke",
          "Effect": "Allow",
          "Resource": event.methodArn
        }
      ]
    }
  };
}

Questions:

• what should I return in case of an error? Any request to my websocket-server that doesn't have the secret header/querystring returns 500 right now, and I'd prefer it to return a 4xx status code.

• what is the correct type for the authorization handler? I'm using APIGatewayProxyHandler on the other fn handlers which gives me nice inline errors.

  How my other handlers look like, which gives me pleasant TypeScript-errors when I do something wrong

  ```ts

  export const connectHandler: APIGatewayProxyHandler = async (event, _context) => {
  const connectionId = event.requestContext.connectionId!

  console.log('➕ Adding connection ', connectionId)

  await client.query('INSERT INTO "public"."Connection"("id") VALUES($1) RETURNING *', [connectionId])
  return {
  statusCode: 200,
  body: '',
  };
  }

  </details>