Api gateway: Make client_cert optional

[simonvandel]

The field is only set if using mTLS. See https://aws.amazon.com/blogs/compute/introducing-mutual-tls-authentication-for-amazon-api-gateway/

For Lambda authorizers, the event payload is expanded to include additional certificate properties from the client’s authenticated certificate. These properties are found at requestContext.identity.clientCert with the Lambda authorizer v1 payload version or at requestContext.authentication.clientCert with the v2 payload version.

[calavera]

I think we need a couple of serde attributes for this to work. I left you some suggestions.

[simonvandel]

You are right! Opened the PR on mobile, so that's what I get for doing that 🙂

[calavera]

no worries at all, thanks a lot for opening this PR with a clear description on why the current behavior is not correct!

[simonvandel]

Cool. Do you want me to update the version number to get ready for a new cargo release, or how do you want to do that?

[calavera]

Cool. Do you want me to update the version number to get ready for a new cargo release, or how do you want to do that?

I'll do that this evening, don't worry about it.