Yii2 basic REST API authentication error

Question

For some reason my Yii2 REST API authentication doesnn't work anymore.

I've written a function to get response from my API:

function getJSON($template_url) {
    $authorization = "Authorization: Bearer " . get_option("auth_key");

    // Create curl resource
    $ch = curl_init();
    // Set URL
    curl_setopt($ch, CURLOPT_URL, $template_url);
    // Return transfer as a string
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    // Set headers
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/json', $authorization));
    // $output contains output as a string
    $output = curl_exec($ch);
    // Close curl resource
    curl_close($ch);

    return json_decode($output, true);
}

This gives me the following response:

Array ( [name] => Unauthorized [message] => You are requesting with an invalid credential. [code] => 0 [status] => 401 [type] => yii\web\UnauthorizedHttpException )

I've got this in my controller:

public function behaviors(){
    return [
        'contentNegotiator' => [
            'class' => ContentNegotiator::className(),
            'formats' => [
                'application/json' => Response::FORMAT_JSON,
            ],
        ],

        'authenticator' => [
            'class' => CompositeAuth::className(),
            'except' => ['activate'],
            'authMethods' => [
                HttpBearerAuth::className(),
            ],
        ]

    ];
}

And this is the findIdentityByAccessToken in the User class:

public static function findIdentityByAccessToken($token, $type = null) {
    $query = (new Query())
        ->select([
          'kl.access_token                                            access_token',
        ])
        ->from('klanten kl')
        ->where(['kl.access_token' => $token])
        ->one();
    return $query;
}

The database table has a column access_token. I've checked if the access token I use in the getJSON function is available in the database and it is. So I don't know what I'm doing wrong.

nadar · Accepted Answer · 2016-09-01 09:57:07Z

0

This can also be a Problem with the Request Headers on different Apache systems. Sometimes the Authorization Header gets lost. Add the below code to your htaccess:

 SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0

Missing Authorization Header discussion on GitHub

answered Sep 1, 2016 at 9:57

nadar

1,07811 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Wouter den Ouden Over a year ago

I'm using this code in my WordPress plugin, so I can't change the htaccess. Or does the Authorizaiton Header get lost on the API?

nadar Over a year ago

I was just assuming this could be a problem as you told For some reason my Yii2 REST API authentication doesnn't work anymore. - this means to me it was working already and you have maybe moved it to another server runing the fast/cgi mode which losing the auth headers.

Wouter den Ouden Over a year ago

It did indeed work before. I think the only that changed is the database connection. But the database is exactly the same so I don't know if thats the problem.

Moeez Over a year ago

I have used it but still getting same issue :(

Collectives™ on Stack Overflow

Yii2 basic REST API authentication error

1 Answer 1

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related