我有一个集中的API,允许通过HTTP摘要进行用户身份验证,并要求用户登录许多用户相关的功能. CakePHP强制登录的方式是检查操作是否需要登录,重定向到您的登录操作(默认为/ users / LOGin),然后您可以重定向.

我通过执行以下操作创建了我的API：

//Config/routes.PHP
///////////////////////////
/**
 * Users Controller routes for REST API 
 */
    Router::maPResources('users');
/**
 * Parses extensions for data serialization 
 */
    Router::parseExtensions();

//Controller/UserController.PHP
////////////////////////////////
<?PHP

App::uses('DigestAuthenticate','Controller/component/Auth/');

class UsersController extends AppController {

    VAR $name = 'Users';

    //Login callback
    function login() {
        //dont render for login,just a call back for auth
        $this->autoRender = false;

        if ($this->Auth->login()) {
            $this->redirect($this->Auth->redirect());
        }
    }

    //GET /users.[XMl|json]
    //this is the basic call that @R_512_2187@s user authentication
    //basically a login then echo
    function index() {
        if ($this->Auth->login()) {
            $user = $this->Auth->user();

            $this->User->id = $user['id'];
            $this->User->saveField('last_login',date('Y-m-d H:i:s'));

            $this->set('response',array(
                'response' => array(
                    'code' => 'users_auth_success','message' => 'User has passed authentication','data' => $user
                )
            ));
            //will serialize to xML or JSON based on extension
            $this->set('_serialize','response');
        } 
    }
}

?>

然后,您可以在以下内容中使用此API：

$c = curl_init($uri . '.' . $this->_format);

curl_setopt($c,CURLOPT_RETURNtransfer,1);
curl_setopt($c,CURLOPT_USERPWD,$login['user'] . ':' . $login['pass']);
curl_setopt($c,CURLOPT_HTTPAUTH,CURLAUTH_DIGEST);
curl_setopt($c,CURLOPT_SSL_VERIFYPEER,false);
curl_setopt($c,CURLOPT_FOLLOWLOCATION,true);

$response = curl_exec($c);
$info = curl_getinfo($c);

curl_close($c);

if($info['http_code'] == $this->_http_codes['OK']) {
    //success
    if($this->_format == 'xml')
        $response = Xml::toArray(Xml::build($response));
    else//JSON
        $response = json_decode($response);
        return $response['response']['data'];
} else if($info['http_code'] == $this->_http_codes['Unauthorized']) {
    return false;
} else {
    return null;
}