**Course Title:** Mastering Yii Framework: Building Scalable Web Applications **Section Title:** RESTful API Development with Yii **Topic:** Build a RESTful API for a resource management system with user authentication.(Lab topic) **Objective:** By the end of this topic, you will be able to design and implement a RESTful API for a resource management system with user authentication using Yii framework. You will learn how to create API endpoints for CRUD operations, implement user authentication, and secure API routes. **Prerequisites:** * Familiarity with Yii framework and its ecosystem * Understanding of RESTful API principles * Knowledge of user authentication and authorization in Yii **Step 1: Setting up the Project** * Create a new Yii project using the `yii new` command * Install the required dependencies using Composer * Configure the database connection in the `config/db.php` file **Step 2: Defining the Resource Model** * Create a new model for the resource using the `yii migrate` command * Define the model attributes and relationships in the `models/Resource.php` file * Implement the `ActiveRecord` interface to enable CRUD operations **Step 3: Creating API Endpoints** * Create API endpoints for CRUD operations using the `Controller` class * Use the `actionCreate`, `actionUpdate`, `actionDelete`, and `actionIndex` methods to handle API requests * Implement API authentication using the `auth` middleware **Step 4: Implementing User Authentication** * Create a new user model using the `yii migrate` command * Implement user authentication using the `auth` middleware * Use the `User` model to authenticate API requests **Step 5: Securing API Routes** * Use the `auth` middleware to secure API routes * Implement role-based access control (RBAC) to restrict access to API endpoints **Example Code:** ```php // models/Resource.php namespace app\models; use yii\db\ActiveRecord; class Resource extends ActiveRecord { public static function tableName() { return 'resources'; } public function rules() { return [ [['name', 'description'], 'required'], [['name', 'description'], 'string', 'max' => 255], ]; } } // controllers/ResourceController.php namespace app\controllers; use yii\web\Controller; use app\models\Resource; class ResourceController extends Controller { public function actionCreate() { $model = new Resource(); if ($model->load(Yii::$app->request->post()) && $model->save()) { return $this->redirect(['index']); } return $this->render('create', ['model' => $model]); } public function actionIndex() { $resources = Resource::find()->all(); return $this->render('index', ['resources' => $resources]); } } // config/web.php return [ 'components' => [ 'user' => [ 'identityClass' => 'app\models\User', 'enableAutoLogin' => true, 'loginUrl' => ['site/login'], ], 'authManager' => [ 'class' => 'yii\rbac\DbManager', ], ], ]; ``` **Tips and Variations:** * Use the `yii\rest\ActiveController` class to create API endpoints for CRUD operations * Implement API authentication using the `auth` middleware and the `User` model * Use the `authManager` component to implement role-based access control (RBAC) * Secure API routes using the `auth` middleware and the `User` model **Exercise:** * Create a new API endpoint for creating a new resource * Implement API authentication using the `auth` middleware and the `User` model * Use the `authManager` component to implement role-based access control (RBAC) **Leave a comment or ask for help if you have any questions or need further clarification on any of the topics covered in this topic.** **Next topic:** Using query builder for complex database queries. From: Advanced Active Record and Querying.