<?php
/*
 * 前端传递 JSON 数据进来，格式是{"name":"admin","pwd":"123456"}
 * 需要对数据在指定场景下验证，并对应到模型的 username 属性和 password_hash 属性
 */

// 模型代码
class SignInForm
{
	public $name;
	public $pwd;

	public function rules()
    {
        $rules = [
            [
                [
                    'name',
                    'pwd',
                ],
                'required',
                'on' => 'signIn',
            ],
            [
                ['name'],
                'default',
                'value' => $this->username,
                'on' => 'signIn',
            ],
            [
                ['pwd'],
                'default',
                'value' => $this->password_hash,
                'on' => 'signIn',
            ],
        ];

        return $rules;
    }
}

// 控制器代码
<?php

use Yii;
use workerbee\api\controllers\BaseController;

class UserController extends BaseController
{
public function actionSignIn()
    {
        $data['SignInForm'] = Yii::$app->request->post();
        $signInModel = new SignInForm(['scenario' => 'signIn']);

        if ($signInModel->load($data) && $signInModel->validate()) {
            $user = SignInForm::findByUsername($signInModel->username);
            $validator = Yii::$app->getSecurity()->validatePassword($signInModel->pwd, $user->password_hash);
            if ($user !== null && $validator) {
                $user->access_token = $signInModel->getNewAccessToken();
                if ($user->save()) {
                    return $user;
                }

                throw new ServerErrorHttpException('登陆失败.');
            }

            throw new BadRequestHttpException('账号名或密码错误.');
        }

        throw new UnprocessableEntityHttpException('数据验证失败.');
    }
}