search

filsh / yii2-oauth2-server

A wrapper for implementing an OAuth2 Server(https://github.com/bshaffer/oauth2-server-php)
MIT License
332 stars 167 forks source link

one user can use other user token to access api. How to make it user specific. #131

Open gurinder-sason opened 7 years ago

gurinder-sason commented 7 years ago

i have just implemented this, i am new to yii. my problem is after installation and configuration the library. i am not able to understand few things.

  1. on adding behaviour, authentication is added to every controller action. how it is called for every action automatically. is behaviour works like constuctor?
  2. when i call any api with access_token it again automatically validating the token but down know how it is working?
  3. access token generated by one user, can be used by other user. so how i can make sure token generated by one user can be used by only him not other user. To do this i think i have to add some code where it is validating the authentic user. but know the location.

So if anyone can help me in this regard is most welcome.

Thanks.