Now that our API is functional, let's add the ability for users to be authenticated against our API. For this, we're going to create an endpoint that accepts the following JSON request body:
{
"email": "[email protected]",
"password": "<example_password>"
}With this information, the API will be authenticated using LoginForm, which we worked on in previous chapters. If the user is valid, we'll generate a new API token that will be stored in the user_metadata table. This token will be returned to the client who is making the request and will be used to authenticate for all future requests:
To get started, create a new controller in
protected/modules/api/controllers/calledUserController.phpwith the following definition:<?php class UserController extends ApiController {}Next, we'll need to define a default set of access rules so as to allow our authentication method to be used without authentication:
public function accessRules() { return array( ...