columns WHERE table_schema = DATABASE () and table_name ='user'and column_name ='access_token') - > queryOne () //Determine whether the user table has the field'access_token'. $ret = this - > DB - > createCommand ('SELECT * FROM information_schema. Open your project directory /console/migrations/m181224_075747_add_column_access_token_user.yii migrate/create add_column_expire_at_to_user yii migrate/create add_column_access_token_to_user Enter the project root directory, open the console and enter the following commands:.Here’s a brief introduction from the Yii Framework 2.0 authoritative guide Implementation stepsĬontinue with the previous article (use the default User tables for the time being, separate different tables for authentication in the formal environment) Data content to be addedįollowing the last paragraph UserData sheet, we need to add one more access_tokenand expire_atField, OAuth 2: The user gets access token based on OAuth 2 protocol from the authentication server and sends it to the API server via HTTP Bearer Tokens.Request parameters: access token is sent as API URL request parameters, such as …, since most servers save request parameters to the log, this method should be mainly used for JSONP requests, because it cannot use HTTP headers to send access token.Applications in access token can safely exist scenarios where the API user side, for example, is a program running on a server.

HTTP Basic Authentication: Accesstoken is sent as a username.

APIThe request shall be adopted HTTPSTo prevent Man-in-the-middle (MitM) man-in-the-middle attack. access tokenTo authenticate users, because access tokenUsers can be uniquely identified and authenticated. The usual practice is to send a secret for each request.

Unlike Web applications, RESTful APIsUsually stateless, which means it should not be used sessionsor cookiesTherefore, each request should be accompanied by some kind of authorization certificate, because the user’s authorization status may not pass sessionsor cookiesMaintenance. The following contents have been adjusted according to the actual situation of my project. Recently, we are doing the RESTful API authentication function to record the whole process for future viewing.

Yii2 advanced get frontend web root