Yii2 403在ajax调用期间被禁止

Question

我在order/my-cart 中有jquery，我试图从order/delivery-verify 获取数据。我的javascript如下

$('form#Confirm').submit(function(event){
        event.stopPropagation();
        event.preventDefault();

        Core.ajax({
                type: "GET",
                dataType: "json",
                url: "/order/delivery-verify",
                data: $(this).serialize(),
                success: function (result) {
                    if (typeof (result.status) != 'undefined') {
                        if (result.status == 200) {
                            window.location.href = '/order/checkout';
                        } else {
                            Core.handleInvalidServerResponse(result);
                        }
                    }
                }
            });
    })

此脚本在 subdomain.example.com 中运行良好，但在另一台服务器 subdomain.example-one.com 中引发 403 错误

编辑 OrderController.php

<?php
namespace frontend\controllers;

use common\components\CErrorAction;
use common\helpers\Com;
use frontend\components\CController;
use frontend\models\User;
use yii;
use frontend\models\Configuration;
use yii\helpers\Json;
use yii\helpers\ArrayHelper;
use frontend\models\Order;
use common\helpers\Mailer;

use frontend\models\NewsletterSubscriber;
/**
 * Class SiteController
 * @package frontend\controllers
 */
class OrderController extends CController
{

    /**
     * @return array
     */
    public function actions()
    {
        return [
            'error' => [
                'class' => CErrorAction::class
            ],
        ];
    }

   /**
     *
     * @return type Json
     * @Title("Checkout verify")
     */
    public function actionDeliveryVerify()
    {
    .....
    }
......
}

Answer 1

public function accessRules()
{
    return array(
        array(
          'allow',
          'actions'=>array('delivery-verify'),
          'users'=>array('*'),
        )
    );
}

尝试在您的控制器中添加accessRules()。以上代码允许任何用户访问delivery-verify 操作。

Yii1.1官方API文档请点击以下链接： - Yii1.1 CController - Yii1.1 CAccessControlFilter - Authentication and Authorization