yiisoft
Add ability to specify request type in optional patterns
Group::create("/products")
->withCors(Cors::class)
->routes()
->routes(
Route::get('')
->action([ProductController::class, 'index'])
->name('product/index'),
Route::get('/{id:\d+}')
->middleware(Authentication::class)
->action([ProductController::class, 'view'])
->name('product/view'),
Route::post('')
->middleware(Authentication::class)
->action([ProductController::class, 'create'])
->name('product/create'),
Route::post('/{id:\d+}')
->middleware(Authentication::class)
->action([ProductController::class, 'update'])
->name('product/update'),
Route::delete('/{id:\d+}')
->middleware(Authentication::class)
->action([ProductController::class, 'delete'])
->name('product/delete'),
Route::put('/{id:\d+}/undo')
->middleware(Authentication::class)
->action([ProductController::class, 'undo'])
->name('product/undo'),
Route::post('/{id:\d+}/favorite')
->middleware(Authentication::class)
->action([ProductController::class, 'favorite'])
->name('product/favorite'),
Route::delete('/{id:\d+}/favorite')
->middleware(Authentication::class)
->action([ProductController::class, 'cancelFavorite'])
->name('product/cancelFavorite'),
),
like product/view if user is login will return 'favorite': true, if not login will return 'favorite': false
but if is use Authentication middleware, must login.
is can use follow code
Authentication::class => [
'class' => Authentication::class,
'__construct()' => [
'authenticationFailureHandler' => Reference::to(PassportRequestErrorHandler::class),
],
'withOptionalPatterns()' => [
'optional' => ['/en/products/[1-9]']
]
],
but delete,update action url is like to view. what can i do?
- Remove Authentication middleware from the route.
- Use
$currentUser->isGuest()in your controller.
@rustamwin If remove Authentication middleware in route, $currentUser->isGuest() alway return true.
@hiscaler You should add optional routes to withOptionalPatterns() method. For example:
Authentication::class => [
'class' => Authentication::class,
'__construct()' => [
'authenticationFailureHandler' => Reference::to(PassportRequestErrorHandler::class),
],
'withOptionalPatterns()' => [
'optional' => [
'/en/products/[1-9]',
'products/product/view', // Don't forget adapt pattern for your case
]
]
],
@vjik Can not.
GET /en/products/1 is return product 1 detail PUT /en/products/1 is update product 1 detail DELETE /en/products/1 is delete product 1
but withOptionalPatterns.optional
['/en/products/[1-9]']
can't not know what's request method.
and has a other question.
['/en/products/[1-9]{1}']
can't matched /en/products/123
@hiscaler see patterns https://github.com/yiisoft/strings/blob/master/README.md#wildcardpattern-usage
@hiscaler see patterns https://github.com/yiisoft/strings/blob/master/README.md#wildcardpattern-usage
Valid setting is ['/en/products/[1-9]*'] , thank you.
@vjik Can not.
GET /en/products/1 is return product 1 detail PUT /en/products/1 is update product 1 detail DELETE /en/products/1 is delete product 1
but withOptionalPatterns.optional
['/en/products/[1-9]']can't not know what's request method.
So i think should add check request method in Authentication.isOptional
@hiscaler you want make optional authentication for GET request only and otherwise required (POST, DELETE, etc.)?
Another idea: leave in Authentication middleware authentication process only and create new middleawre that will be throw exception or return response "No access".