Yii2 -使用密钥验证属性

return [
    // ...
    'components' => [
        'request' => [
            'enableCsrfValidation' => true,
        ],
    ],
];

<?php $form = ActiveForm::begin(); ?>

<?= $form->field($model, 'username')->textInput() ?>
<?= $form->field($model, 'password')->passwordInput() ?>

<?= Html::submitButton('Login', ['class' => 'btn btn-primary']) ?>

<?php ActiveForm::end(); ?>

use yii\web\Controller;
use yii\web\BadRequestHttpException;

class SiteController extends Controller
{
    public function beforeAction($action)
    {
        if (parent::beforeAction($action)) {
            $request = Yii::$app->request;
            if ($request->isPost && !$request->getCsrfToken()) {
                throw new BadRequestHttpException('Invalid CSRF token.');
            }
            return true;
        } else {
            return false;
        }
    }
}