Silverstripe 3允许对控制器操作进行基本身份验证

use SilverStripe\Control\Controller;
use SilverStripe\Control\HTTPResponse;

class MyController extends Controller
{
    private static $allowed_actions = ['protectedAction'];

    public function protectedAction()
    {
        return new HTTPResponse("This is a protected action.");
    }

    public function beforeRequest()
    {
        parent::beforeRequest();

        if ($this->request->param('Action') === 'protectedAction') {
            $auth = $this->request->getHeader('Authorization');
            if (!$auth) {
                return $this->unauthorised();
            }

            list($type, $credentials) = explode(' ', $auth);
            if (strtolower($type) !== 'basic') {
                return $this->unauthorised();
            }

            list($username, $password) = explode(':', base64_decode($credentials));
            if ($username !== 'admin' || $password !== 'secret') {
                return $this->unauthorised();
            }
        }
    }

    private function unauthorised()
    {
        $response = new HTTPResponse();
        $response->setStatusCode(401);
        $response->addHeader('WWW-Authenticate', 'Basic realm="My Site"');
        $response->setBody('Unauthorized');
        return $response;
    }
}