auth token

This commit is contained in:
andrey 2021-08-05 18:52:07 +03:00
parent 3222cf821d
commit e73ac5e5df
3 changed files with 23 additions and 11 deletions

View File

@ -6,6 +6,8 @@ use common\behaviors\GsCors;
use common\classes\Debug; use common\classes\Debug;
use common\models\InterviewRequest; use common\models\InterviewRequest;
use frontend\modules\api\models\ProfileSearchForm; use frontend\modules\api\models\ProfileSearchForm;
use yii\filters\auth\CompositeAuth;
use yii\filters\auth\HttpBearerAuth;
use yii\filters\auth\QueryParamAuth; use yii\filters\auth\QueryParamAuth;
class ProfileController extends \yii\rest\Controller class ProfileController extends \yii\rest\Controller
@ -20,10 +22,12 @@ class ProfileController extends \yii\rest\Controller
'application/json' => \yii\web\Response::FORMAT_JSON, 'application/json' => \yii\web\Response::FORMAT_JSON,
], ],
], ],
'authenticatior' => [ 'authenticator' => [
'class' => QueryParamAuth::class, //implement access token authentication 'class' => CompositeAuth::class,
'except' => ['login'], // no need to verify the access token method, pay attention to distinguish between $noAclLogin 'authMethods' => [
], HttpBearerAuth::class,
],
]
// 'corsFilter' => [ // 'corsFilter' => [
// 'class' => GsCors::class, // 'class' => GsCors::class,
// 'cors' => [ // 'cors' => [

View File

@ -5,6 +5,8 @@ namespace frontend\modules\api\controllers;
use common\behaviors\GsCors; use common\behaviors\GsCors;
use common\models\Options; use common\models\Options;
use yii\filters\AccessControl; use yii\filters\AccessControl;
use yii\filters\auth\CompositeAuth;
use yii\filters\auth\HttpBearerAuth;
use yii\filters\auth\QueryParamAuth; use yii\filters\auth\QueryParamAuth;
class SkillsController extends \yii\rest\Controller class SkillsController extends \yii\rest\Controller
@ -18,10 +20,12 @@ class SkillsController extends \yii\rest\Controller
'application/json' => \yii\web\Response::FORMAT_JSON, 'application/json' => \yii\web\Response::FORMAT_JSON,
], ],
], ],
'authenticatior' => [ 'authenticator' => [
'class' => QueryParamAuth::class, //implement access token authentication 'class' => CompositeAuth::class,
'except' => ['login'], // no need to verify the access token method, pay attention to distinguish between $noAclLogin 'authMethods' => [
], HttpBearerAuth::class,
],
]
// 'corsFilter' => [ // 'corsFilter' => [
// 'class' => GsCors::class, // 'class' => GsCors::class,
// 'cors' => [ // 'cors' => [

View File

@ -8,6 +8,8 @@ use common\classes\Debug;
use common\models\User; use common\models\User;
use frontend\modules\api\models\LoginForm; use frontend\modules\api\models\LoginForm;
use Yii; use Yii;
use yii\filters\auth\CompositeAuth;
use yii\filters\auth\HttpBearerAuth;
use yii\filters\ContentNegotiator; use yii\filters\ContentNegotiator;
use yii\rest\ActiveController; use yii\rest\ActiveController;
use yii\helpers\ArrayHelper; use yii\helpers\ArrayHelper;
@ -28,9 +30,11 @@ class UserController extends ActiveController
'application/json' => Response::FORMAT_JSON, 'application/json' => Response::FORMAT_JSON,
], ],
], ],
'authenticatior' => [ 'authenticator' => [
'class' => QueryParamAuth::class, //implement access token authentication 'class' => CompositeAuth::class,
'except' => ['login'], // no need to verify the access token method, pay attention to distinguish between $noAclLogin 'authMethods' => [
HttpBearerAuth::class,
],
], ],
'corsFilter' => [ 'corsFilter' => [
'class' => GsCors::class, 'class' => GsCors::class,