yii2-rest-rbac是權限系統Yii2的rest版

• 安裝:

composer?require?windhoney/yii2-rest-rbac

使用

配置oauth2和rbac

   'modules' => [
        'rbac' => [
            'class' => 'wind\rest\modules'
        ],
        'oauth2' => [
            'class' => 'filsh\yii2\oauth2server\Module',
            'tokenParamName' => 'access_token',
            'tokenAccessLifetime' => 3600 * 24,
            'storageMap' => [
                'user_credentials' => 'backend\models\User',
            ],
            'grantTypes' => [
                'user_credentials' => [
                    'class' => 'OAuth2\GrantType\UserCredentials',
                ],
                'client_credentials' => [
                    'class' => 'OAuth2\GrantType\ClientCredentials',
                ],
                'refresh_token' => [
                    'class' => 'OAuth2\GrantType\RefreshToken',
                    'always_issue_new_refresh_token' => true
                ],
                'authorization_code' => [
                    'class' => 'OAuth2\GrantType\AuthorizationCode'
                ],
            ],
             'components' => [
                'request' => function () {
                    return \filsh\yii2\oauth2server\Request::createFromGlobals();
                },
                'response' => [
                    'class' => \filsh\yii2\oauth2server\Response::class,
                ],
            ],
        ]
    ],
    'components' => [
        'authManager' => [
            'class' => 'wind\rest\components\DbManager', //配置文件
        ],
    ]

配置權限

    'as access' => [
        'class' => 'wind\rest\components\AccessControl',
        'allowActions' => [
            'site/*',//允許訪問的節點，可自行添加
            'rbac/menu/user-menu',
            'oauth2/*',
        ]
    ],

創建所需要的表

1. 用戶表user和菜單表menu

yii migrate --migrationPath=@vendor/windhoney/yii2-rest-rbac/migrations

2. rbac相關權限表

yii migrate --migrationPath=@yii/rbac/migrations/

auth_item?表添加一個字段?parent_name?varchar(30) COLLATE utf8_unicode_ci DEFAULT '' COMMENT '父級名稱',

3. oauth2相關表

yii migrate --migrationPath=@vendor/filsh/yii2-oauth2-server/migrations

4. 新增分組表

CREATE TABLE `auth_groups` (
  `group_id` varchar(50) NOT NULL COMMENT '分組id',
  `group_name` varchar(100) NOT NULL DEFAULT '' COMMENT '分組名稱',
  `group_status` varchar(50) NOT NULL DEFAULT '' COMMENT '狀態（開啟，關閉）',
  PRIMARY KEY (`group_id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 ;

CREATE TABLE `auth_groups_child` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `group_id` varchar(50) NOT NULL COMMENT '分組id',
  `user_id` varchar(64) NOT NULL COMMENT '用戶id',
  PRIMARY KEY (`id`),
  UNIQUE KEY `group_id_2` (`group_id`,`user_id`),
  KEY `group_id` (`group_id`),
  KEY `user_group_id` (`user_id`) USING BTREE
) ENGINE=InnoDB AUTO_INCREMENT=795 DEFAULT CHARSET=utf8 ;

添加路由配置

• 將yii2-rest-rbac/example/rbac_route.php文件內容配置到項目的urlManager的rules規則下
• 或者在main.php文件中 添加

$dir = __DIR__ . "/route";
$main = wind\rest\helper\RbacHelper::addRoute($dir, $main);
return $main;

并將此文件放到config/route/rbac_route.php

接口文檔參考

• 文檔