Cognito and API

exports.handler = (event, context, callback) => {
    const token = event.authorizationToken;
    //Use token
    if (token == 'allow') {
        const policy = genPolicy('allow', event.methodArn);
        const principalId = 'aflaf78fd7afalnv';
        const context = {
            simpleAuth: true
        };
        const response = {
            principalId: principalId,
            policyDocument: policy,
            context: context
        };
        callback(null, response);
    } else if (token == 'deny') {
        const policy = genPolicy('deny', event.methodArn);
        const principalId = 'aflaf78fd7afalnv';
        const context = {
        simpleAuth: true
        };
        const response = {
            principalId: principalId,
            policyDocument: policy,
            context: context
        };
        callback(null, response);
    } else {
       callback('Unauthorized');
    }
 
};

function genPolicy(effect, resource) {
    const policy = {};
    policy.Version = '2012-10-17';
    policy.Statement = [];
    const stmt = {};
    stmt.Action = 'execute-api:Invoke';
    stmt.Effect = effect;
    stmt.Resource = resource;
    policy.Statement.push(stmt);
    return policy;
}

------------------------------------------------------------------------------------

var xhr = new XMLHttpRequest();

xhr.open('DELETE', 'https://ktl8ycz4w8.execute-api.us-east-1.amazonaws.com/dev/compare-yourself');

xhr.onreadystatechange = function(event) {

  console.log(JSON.parse(event.target.response));

}

xhr.setRequestHeader('Content-Type', 'application/json');

xhr.setRequestHeader('Authorization', 'allow');

xhr.send(JSON.stringify({age: 29, height: 73, income: 1900}));

-------------------------------------------------------------------------------------------------------

#set($inputRoot = $input.path('$'))

{

  "age" : "$inputRoot.age",

  "height": "$inputRoot.height",

  "income": "$inputRoot.income",

  "userId": "$context.authorizer.principalId"

}

----------------------------------------------------------------------------------------

const AWS = require('aws-sdk');

const dynamodb = new AWS.DynamoDB({region: 'us-east-1', apiVersion: '2012-08-10'});

exports.handler = (event, context, callback) => {

    const params = {

        Item: {

            "UserId": {

                S: event.userId

            },

            "Age": {

                N: event.age

            },

            "Height": {

                N: event.height

            },

            "Income": {

                N: event.income

            }

        },

        TableName: "compare-yourself"

    };

    dynamodb.putItem(params, function(err, data) {

        if (err) {

            console.log(err);

            callback(err);

        } else {

            console.log(data);

            callback(null, data);

        }

    });

};

---------------------------------------------------------------------------------------