# Authorization header requires

**URL:** <https://forum.serverless.com/t/authorization-header-requires/1398>\
**Category:** Serverless Framework\
**Created:** [February 27, 2017, 4:02pm UTC](https://forum.serverless.com/t/authorization-header-requires/1398 "2017-02-27T16:02:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![xavicolomer](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.serverless.com/xavicolomer/32/486_2.png) [@xavicolomer](https://forum.serverless.com/u/xavicolomer)\
**Post date:** [February 27, 2017, 4:02pm UTC](https://forum.serverless.com/t/authorization-header-requires/1398/1 "2017-02-27T16:02:25Z")

</div>

Hi there,

I have a question regarding Authorization functions. I have to methods both using the same lambda function as Authorizer. the GET method works fine, but the POST method doesn’t.

Here is the error:  
`"Authorization header requires 'Credential' parameter. Authorization header requires 'Signature' parameter. Authorization header requires 'SignedHeaders' parameter. Authorization header requires existence of either a 'X-Amz-Date' or a 'Date' header`

Any idea why this two methods work differently? Thanks

YML Structure:

```
      authorizerFunc:
        handler: auth/handler.authorizerFunc
      items-base:
        handler: api/items/handler-list.get
        events:
          - http:
              method: get
              path: api/items
              integration: lambda
              authorizer: 
                name: authorizerFunc
                identitySource: method.request.header.Authorization
                    
      items-create:
        handler: api/items/handler-create.post
        events:
          - http:
              method: post
              path: api/items/create
              integration: lambda
              authorizer: 
                name: authorizerFunc
                identitySource: method.request.header.Authorization
```

---

<div class="post-metadata">

**Author:** ![xavicolomer](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.serverless.com/xavicolomer/32/486_2.png) [@xavicolomer](https://forum.serverless.com/u/xavicolomer)\
**Post date:** [February 27, 2017, 4:27pm UTC](https://forum.serverless.com/t/authorization-header-requires/1398/2 "2017-02-27T16:27:12Z")

</div>

Forget it.

We decided to separate the API url and now they are different, so the error basically means that /items POST is not defined, should be items/create

(I am migrating and old api, I know it probably would make more sense to set PUT instead of create)