• yii restfull 方法验证用户身份通过token


    1. 在配置文件中修改用于储存acess token的类
            'user' => [
                'identityClass' => 'appmodelsCustomer',
                'enableAutoLogin' => false,//disable the cookie login
            ],
    

             2. 实现接口IdentityInterface在用户信息类中

    class Customer extends ActiveRecord implements IdentityInterface
    {
        public static function tableName()
        {
            return 'customer';
        }
    
        /**
         * @set the primary key name
         */
        public static function primaryKey()
    
        {
            return ['customerID'];
        }
    
        /**
         * Finds an identity by the given ID.
         *
         * @param string|integer $id the ID to be looked for
         * @return IdentityInterface|null the identity object that matches the given ID.
         */
        public static function findIdentity($id)
        {
            return static::findOne($id);
        }
    
        /**
         * Finds an identity by the given token.
         *
         * @param string $token the token to be looked for
         * @return IdentityInterface|null the identity object that matches the given token.
         */
        public static function findIdentityByAccessToken($token, $type = null)
        {
            return static::findOne(['accessToken' => $token]);//注意这里与要accessToken的格式
        }
    
        /**
         * @return int|string current user ID
         */
        public function getId()
        {
            return $this->customerID;
        }
    
        /**
         * @return string current user auth key
         */
        public function getAuthKey()
        {
            return $this->auth_key;
        }
    
        /**
         * @param string $authKey
         * @return boolean if auth key is valid for current user
         */
        public function validateAuthKey($authKey)
        {
            return $this->getAuthKey() === $authKey;
        }
    }
    

             3. 修改basic/vendor/yiisoft/yii2/filters/auth/QueryParamAuth中的token名字

              注意,传递的参数中有可能token的变量名字并不等于yii默认的access-token,我们要让他和我们用的变量名保持一致

    在配置文件中修改用于储存acess token的类

  • 相关阅读:
    C#中async/await中的异常处理
    Xunit
    Markdown安装与简单使用
    .Net Ajax跨域请求总结
    centos 安装 Vmare tool
    linux安装Java
    linux常用命令整理
    autofac解析Mvc和Webapi的坑
    swarm on ubuntu
    deploy service on swarm
  • 原文地址:https://www.cnblogs.com/wlemory/p/4744810.html
Copyright © 2020-2023  润新知