CakePHP3的Auth

基于Controller的认证

看配置代码：

        $this->loadComponent('Auth', [
            'authorize' => 'Controller',
            'authenticate' => [
                'Form' => [
                    'fields' => [
                        'username' => 'email',
                        'password' => 'password'
                    ]
                ]
            ],
            'loginAction' => [
                'controller' => 'Users',
                'action' => 'login'
            ],
            'unauthorizedRedirect' => $this->referer()
        ]);

需求，在登录成功后需要修改用户表的某一个字段（最后登录时间）。

基于Controller认证的基础是 Auth是在Controller初始化之前，如果在认证流程走完之前进行数据库操作，是不会成功的。如下面的代码：

    // In src/Controller/UsersController.php
    public function login()
    {
        if ($this->request->is('post')) {
            $user = $this->Auth->identify();
            if ($user) {
                // update login_logined field
                $user = $this->Users->get($this->Auth->user('id'));
                $user->last_logined = date("Y-m-d H:i:s");
                $this->Users->save($user);
                // end
                $this->Auth->setUser($user);
                return $this->redirect($this->Auth->redirectUrl());
            }
            $this->Flash->error('Your username or password is incorrect.');
        }
    }

上面代码一运行就会在

$user = $this->Users->get($this->Auth->user('id'));

这儿报错，因为Controller未被初始化，里面的任何东西都无法使用。如何才知道认证流程是否走完呢？走了好些弯路，其实在redirect之前就走完了，如果执行$this->redirect($this->Auth->redirectUrl());不报错，就证明controller是初始化完了的。总结来看，就是$this->Auth->setUser($user);这句话是关键作用，他通知Auth组件认证已经完成，请接着走。

最终代码修改如下：

   // In src/Controller/UsersController.php
    public function login()
    {
        if ($this->request->is('post')) {
            $user = $this->Auth->identify();
            if ($user) {
                $this->Auth->setUser($user);
                // update login_logined field
                $user = $this->Users->get($this->Auth->user('id'));
                $user->last_logined = date("Y-m-d H:i:s");
                $this->Users->save($user);
                // end
                return $this->redirect($this->Auth->redirectUrl());
            }
            $this->Flash->error('Your username or password is incorrect.');
        }
    }

总结：Auth是在beforeFilter生命周期之前。