Как работает bearer атвторизация в yii2

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

<?php
namespace appcomponents;
use yiiiltersauthAuthInterface;
use yiiwebUnauthorizedHttpException;

class BearerAuth implements AuthInterface
{
    public function authenticate($user, $request, $response)
    {
        $accessToken = $request->getHeaders()->get('Authorization');
        if (!$accessToken || strpos($accessToken, 'Bearer ') !== 0) {
            throw new UnauthorizedHttpException('You need to authenticate with a valid token');
        }
        $accessToken = substr($accessToken, 7);
        $identity = $user->loginByAccessToken($accessToken, get_class($this));
        if (!$identity) {
            throw new UnauthorizedHttpException('Invalid access token');
        }
        return $identity;
    }

    public function challenge($response)
    {
        $response->getHeaders()->set('WWW-Authenticate', 'Bearer realm="api"');
        throw new UnauthorizedHttpException('You need to authenticate with a valid token');
    }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

<?php
return [
    //...
    'components' => [
        'user' => [
            'identityClass' => 'appmodelsUser',
            'enableSession' => false,
            'enableAutoLogin' => false,
            'loginUrl' => null,
        ],
        'authManager' => [
            'class' => 'yii
bacDbManager',
        ],
        //...
    ],
];

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

<?php
namespace appcontrollers;

use Yii;
use yii
estController;
use yiiiltersauthHttpBearerAuth;
use appcomponentsBearerAuth;

class SiteController extends Controller
{
    public function behaviors()
    {
        $behaviors = parent::behaviors();
        $behaviors['bearerAuth'] = [
            'class' => BearerAuth::class,
            'only' => ['my-action'],
        ];
        return $behaviors;
    }

    public function actionMyAction()
    {
        // Код, который будет выполнен после успешной аутентификации
    }
}