Add ability to specify request type in optional patterns

[yiisoft]

Add ability to specify request type in optional patterns

[rustamwin]

1. Remove Authentication middleware from the route.
2. Use $currentUser->isGuest() in your controller.

[hiscaler]

@rustamwin If remove Authentication middleware in route, $currentUser->isGuest() alway return true.

[vjik]

@hiscaler You should add optional routes to withOptionalPatterns() method. For example:

Authentication::class => [
        'class' => Authentication::class,
        '__construct()' => [
            'authenticationFailureHandler' => Reference::to(PassportRequestErrorHandler::class),
        ],
        'withOptionalPatterns()' => [
            'optional' => [
                '/en/products/[1-9]',
                'products/product/view', // Don't forget adapt pattern for your case
            ]
        ]
    ],

[hiscaler]

@vjik I will try. Thank you!

[hiscaler]

@vjik Can not.

GET /en/products/1 is return product 1 detail
PUT /en/products/1 is update product 1 detail
DELETE /en/products/1 is delete product 1

but withOptionalPatterns.optional

['/en/products/[1-9]']

can't not know what's request method.

[hiscaler]

and has a other question.

['/en/products/[1-9]{1}']

can't matched /en/products/123

[rustamwin]

@hiscaler see patterns https://github.com/yiisoft/strings/blob/master/README.md#wildcardpattern-usage

[hiscaler]

@rustamwin Thank you!

[hiscaler]

@hiscaler see patterns https://github.com/yiisoft/strings/blob/master/README.md#wildcardpattern-usage

Valid setting is ['/en/products/[1-9]*'] , thank you.

[hiscaler]

@vjik Can not.

GET /en/products/1 is return product 1 detail PUT /en/products/1 is update product 1 detail DELETE /en/products/1 is delete product 1

but withOptionalPatterns.optional

['/en/products/[1-9]']

can't not know what's request method.

So i think should add check request method in Authentication.isOptional

[vjik]

@hiscaler you want make optional authentication for GET request only and otherwise required (POST, DELETE, etc.)?

[hiscaler]

@vjik yes, is only GET request, POST, DELETE is must authentication

[vjik]

Need add ability to specify request type in optional patterns.

[vjik]

Another idea: leave in Authentication middleware authentication process only and create new middleawre that will be throw exception or return response "No access".