PHP?? RESTful API ??? ???? ??

RESTful API? ????? ???? ??? ?????? ????? ????? ??? ??????. ?? ????? API? ??? ???? ?? ????? ??? ??? ?????. ? ????? PHP?? RESTful API ??? ???? ??? ???? ???? ?? ??? ?????.

1. ?? ??

?? ??? ?? ??? ?? ???? ?? ????? ???? ?? ? ?????. ?? ??? ??? HTTP ?? ??? Authorization ??? ???? ??? ?? ??? ???? ????. PHP??? HTTP ?? ?? ??? ???? ?? ??? ??? ? ????.

<?php
// 獲取HTTP請求頭部信息
$headers = getallheaders();

// 驗證Authorization字段
if (isset($headers['Authorization'])) {
    // 獲取用戶憑證
    $authHeader = $headers['Authorization'];
    list($type, $credentials) = explode(' ', $authHeader);

    // 解碼憑證
    $decodedCredentials = base64_decode($credentials);
    list($username, $password) = explode(':', $decodedCredentials);

    // 驗證用戶名和密碼
    if ($username == 'admin' && $password == '123456') {
        echo '通過身份驗證';
    } else {
        echo '身份驗證失敗';
    }
} else {
    // 未傳遞Authorization字段，返回身份驗證失敗
    echo '身份驗證失敗';
}
?>

2. ?? ??

?? ??? ??? ?? ? ???? ?? ?? ??? ???? ?????? ??? ???? ???? ?? ?????. ?? ??? ???? ?? HTTP ?????. PHP??? JWT(JSON Web Token)? ???? ?? ??? ??? ? ????.

<?php
require_once 'vendor/autoload.php';

use FirebaseJWTJWT;

// 設置JWT密鑰
$key = 'your-secret-key';

// 生成Token
$token = JWT::encode(array(
    'username' => 'admin',
    'exp' => time() + 3600
), $key);

// 解碼Token
$decoded = JWT::decode($token, $key, array('HS256'));

// 驗證Token
if ($decoded->username == 'admin') {
    echo '通過身份驗證';
} else {
    echo '身份驗證失敗';
}
?>

? ???? Firebase JWT ?????? ???? Composer? ?? ???? ?? ??? ???? ???????. ? ??? ?? ??? ?? HTTP ??? ??? ???? ???.

3. OAuth 2.0 ??

OAuth 2.0? ??? ???? ????? ?? ?? ??????? ???? ? ???? ????? ???? ??? ?????. PHP??? League OAuth2 ?? ?????? ???? OAuth 2.0 ??? ??? ? ????.

<?php
require_once 'vendor/autoload.php';

use LeagueOAuth2ServerGrantPasswordGrant;
use LeagueOAuth2ServerGrantRefreshTokenGrant;
use LeagueOAuth2ServerResourceServer;
use LeagueOAuth2ServerAuthorizationServer;
use LeagueOAuth2ServerCryptKey;
use LeagueOAuth2ServerGrantClientCredentialsGrant;

// 設置公鑰和私鑰
$privateKey = new CryptKey('path/to/private.key', 'passphrase');
$publicKey = new CryptKey('path/to/public.key');

// 創(chuàng)建認證服務器
$server = new AuthorizationServer();

// 添加授權類型
$server->enableGrantType(
    new PasswordGrant(
        new UserRepository(),
        new RefreshTokenRepository()
    )
);

// 添加客戶端授權類型
$server->enableGrantType(
    new ClientCredentialsGrant(),
    new DateInterval('PT1H') // 訪問令牌有效期為1小時
);

// 創(chuàng)建資源服務器
$resourceServer = new ResourceServer(
    new AccessTokenRepository(),
    $publicKey
);

// 驗證訪問令牌
try {
    $accessToken = $resourceServer->validateAuthenticatedRequest(
        ZendDiactorosServerRequestFactory::fromGlobals()
    );

    echo '通過身份驗證';
} catch (Exception $e) {
    echo '身份驗證失敗';
}
?>

? ???? League OAuth2 ?? ?????? ???? OAuth 2.0 ??? ?????. AuthorizationServer ? ResourceServer ????? ???? ?? ?? ??? ?? ???? ???? ???. ? ??? ?? ResourceServer? ???? ??? ??? ??? ? ????.

??

? ???? PHP?? RESTful API ??? ???? ??? ???? ?? ??, ?? ??, OAuth 2.0 ??? ?? ?? ??? ?????. ?? ?? ??? ?? ?? ??? ?? ??? ?? ??? ???? API ??? ??? ? ????.

? ??? PHP?? RESTful API? ?? ??? ???? ??? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!