What is the process for authenticating a query using OIDC by sending idToken to AppSync GraphQL?

edit

The process for authenticating a query using OIDC by sending idToken to AppSync GraphQL involves the following steps:

1. Configure OIDC authentication in AppSync and obtain the issuer URL and client ID.
2. Generate an idToken for the user by authenticating with the OIDC provider.
3. Add the idToken to the Authorization header of the query request, using the "Bearer" scheme.
4. Send the query request to the AppSync GraphQL API endpoint.
5. AppSync will validate the idToken with the OIDC provider and extract the user’s identity from the token.
6. If the identity is authenticated and authorized to access the requested data, then the query is processed and the results are returned.
7. If the identity is not authorized, then an error will be returned.

Overall, this process ensures that only authorized users can access protected GraphQL resources in the AppSync API.