Websocket Custom Authorizer

[semsphy]

I was trying to use the Custom Authorizer to protect to secure my Websocket. In the custom authorizer, I tried to generate the policy but I still get the error: Unexpected server response: 500 when I was connecting the websocket endpoint.

Pls kindly check my configuration and function, if I was missing something.

Serverless.yml

functions:
  websocket:
    handler: handlers/websocket.php
    memorySize: 512
    layers:
      - ${bref:layer.php-80}
    events:
      - websocket:
          route: $connect
          authorizer:
            name: auth
            identitySource:
              - 'route.request.header.Authorization'

      - websocket: $disconnect
      - websocket: $default
 
  auth:
    handler: handlers/auth.php
    memorySize: 512
    layers:
      - ${bref:layer.php-80}

AuthHandler

use Bref\Context\Context;
use Bref\Event\Http\HttpResponse;
use Exception;

class AuthHandler implements \Bref\Event\Handler
{
    use HasBearerToken;

    const ALLOW = 'Allow';
    const DENY = 'Deny';

    public function handle($event, Context $context)
    {
        $authorization = data_get($event, 'headers.Authorization');
        $methodArn = data_get($event, 'methodArn');

        try {
               
               // ......

                return new HttpResponse($this->generatePolicy('PRINCIPLEID', self::ALLOW, $methodArn));

            }

        } catch (Exception $e) {
           // .....
        }

        return new HttpResponse($this->generatePolicy('PRINCIPLEID', self::DENY, $methodArn), [], 401);
    }

    /**
     * @param string $principal_id
     * @param string $effect Allow|Deny
     * @param string $resource
     *
     * @return string
     */
    protected function generatePolicy(string $principal_id, string $effect, string $resource): string
    {

        return json_encode([
            'principalId' => $principal_id,
            'policyDocument' => [
                'Version' => '2012-10-17',
                'Statement' => [
                    [
                        'Action' => 'execute-api:Invoke',
                        'Effect' => $effect,
                       'Resource' => $resource
                    ]
                ]
            ]
        ]);
    }
}

P.S. Without the Custom Authorizer, the Websocket works fine.

[semsphy]

I did it now.