我如何获取基本授权标头并通过使用php对api进行身份验证

Question

How can i get Basic authorization header and authenticate it for API by using PHP. I had created a unique key which is encoded and stored in database. i am using Slim Framework for rest API.

I can get the header by using $request->headers(); in Slim Framework. It returns all the headers specified, but how do i check that key with my database token.

Is there any proper way to do this?

Answer 1

I did it like this in Slim Framework 3:

I added the Middleware to all of the requests and checked the Authorization header for certain string and if the Authorization header is not set or doesnt match my string i just return 400 HTTP code.

$app->add(function($request,$response,$next){
$authorization_header = $request->getHeader("Authorization");

if(empty($authorization_header) || ($authorization_header[0]!="test")){ //you can check the header for a certain string or you can check if what is in the Authorization header exists in your database

    return $response->withStatus(400);
}

$response = $next($request,$response);

return $response;

});