Yii 框架实现用户认证与授权功能全攻略

// 示例：用户登录
$user = User::findOne(['username' => $username]);
if ($user && Yii::$app->security->validatePassword($password, $user->password_hash)) {
    Yii::$app->user->login($user);
}

// 检查用户是否已登录
if (Yii::$app->user->isGuest) {
    // 用户未登录
} else {
    // 用户已登录
}

// 示例：分配角色
$auth = Yii::$app->authManager;
$role = $auth->createRole('admin');
$auth->add($role);
$auth->assign($role, $user->id);

// 检查用户是否有权限
if (Yii::$app->user->can('updatePost')) {
    // 用户有权限更新帖子
}

// 登录功能
public function actionLogin()
{
    if (!Yii::$app->user->isGuest) {
        return $this->goHome();
    }

    $model = new LoginForm();
    if ($model->load(Yii::$app->request->post()) && $model->login()) {
        return $this->goBack();
    }

    return $this->render('login', [
        'model' => $model,
    ]);
}

// 分配角色和权限
$auth = Yii::$app->authManager;
$createPost = $auth->createPermission('createPost');
$auth->add($createPost);

$updatePost = $auth->createPermission('updatePost');
$auth->add($updatePost);

$author = $auth->createRole('author');
$auth->add($author);
$auth->addChild($author, $createPost);

$admin = $auth->createRole('admin');
$auth->add($admin);
$auth->addChild($admin, $author);
$auth->addChild($admin, $updatePost);

$auth->assign($admin, $user->id);

// 多因素认证
public function actionLogin()
{
    if (!Yii::$app->user->isGuest) {
        return $this->goHome();
    }

    $model = new LoginForm();
    if ($model->load(Yii::$app->request->post()) && $model->login()) {
        // 发送验证码到用户手机
        $code = rand(100000, 999999);
        Yii::$app->sms->send($model->phone, $code);

        // 存储验证码
        Yii::$app->session->set('verificationCode', $code);

        return $this->render('verify', [
            'model' => new VerifyForm(),
        ]);
    }

    return $this->render('login', [
        'model' => $model,
    ]);
}

// 基于规则的授权
$rule = new \app\rbac\AuthorRule;
$auth->add($rule);

$author = $auth->createRole('author');
$author->ruleName = $rule->name;
$auth->add($author);

// 使用缓存优化用户认证
Yii::$app->cache->set('userSession', Yii::$app->user->identity, 3600);

// 使用缓存优化RBAC数据
$auth = Yii::$app->authManager;
$auth->cache = Yii::$app->cache;