ZendFramework 3 コンポーネントを使用して REST API を開発しています。ミドルウェアを使用してすべてのリクエストを検証 (認証) し、リクエストが有効な場合は、通常のコントローラー アクションに渡してリソースを取得し、レスポンスを返すことにしました。
この概念は正しいですか?コントローラをラップするためにミドルウェアを使用していますか?
以下のコードと構成でリクエストをコントローラーに渡す方法は? のミドルウェア
//file: myapp/module/Auth/src/Middleware/Authorize.php
namespace Auth\Middleware;
use Interop\Http\ServerMiddleware\DelegateInterface;
use Interop\Http\ServerMiddleware\MiddlewareInterface;
use Psr\Http\Message\ServerRequestInterface;
use Zend\Json\Json;
use Zend\Http\Response;
use Zend\Diactoros\Response\JsonResponse;
use Zend\Diactoros\Response\RedirectResponse;
class Authorize
{
public function __invoke($request, $response)
{
// Validate $request code goes here ...
$response->getBody()->write('Hello World!');
return $response;
}
}
ルーター構成
//file: myapp/module/Auth/config/module.config.php
namespace Auth;
use Zend\Router\Http\Segment;
use Zend\ServiceManager\Factory\InvokableFactory;
use Doctrine\ORM\Mapping\Driver\AnnotationDriver;
return [
'controllers' => [
'factories' => [
Controller\AuthController::class =>Controller\Factory\AuthControllerFactory::class,
],
],
'service_manager' => [
'factories' => [
\Zend\Authentication\AuthenticationService::class => Service\Factory\AuthenticationServiceFactory::class,
Service\AuthAdapter::class => Service\Factory\AuthAdapterFactory::class,
Service\AuthManager::class => Service\Factory\AuthManagerFactory::class,
Middleware\Authorize::class => InvokableFactory::class,
],
],
'router' => [
'routes' => [
'auth' => [
'type' => Segment::class,
'options' => [
'route' => '/auth[/:action[/:id]]',
'constraints' => [
'action' => '[a-zA-Z][a-zA-Z0-9_-]*',
'id' => '[0-9]+',
],
'defaults' => [
'controller' => Controller\AuthController::class,
'action' => 'index',
],
],
],
'user' => [
'type' => Segment::class,
'options' => [
'route' => '/user[/:action[/:id]]',
'constraints' => [
'action' => '[a-zA-Z][a-zA-Z0-9_-]*',
'id' => '[0-9]+',
],
'defaults' => [
'middleware' => [
Middleware\Authorize::class,
Controller\UserController::class,
],
'controller' => Controller\UserController::class,
'action' => 'index',
],
],
],
],
],
'view_manager' => [
'template_path_stack' => [
'auth' => __DIR__ . '/../view',
],
],
'doctrine' => [
'driver' => [
__NAMESPACE__ . '_driver' => [
'class' => AnnotationDriver::class,
'cache' => 'array',
'paths' => [__DIR__ . '/../src/Entity']
],
'orm_default' => [
'drivers' => [
__NAMESPACE__ . '\Entity' => __NAMESPACE__ . '_driver'
]
]
]
],
];