Yii2登录重定向至首页后会话失效问题排查

Hey there, let's dig into this Yii2 session issue you're facing—it's super frustrating when login works temporarily but drops after redirect, especially since you had a working version before. Let's walk through the most common culprits and fixes step by step:

First, check if your session is actually being persisted correctly:

• Ensure the session save path exists and has proper read/write permissions. Yii defaults to @runtime/sessions, but sometimes permissions get messed up:

  'session' => [
      'savePath' => '@runtime/sessions',
      'cookieParams' => [
          'domain' => $_SERVER['HTTP_HOST'], // Match your current site domain
          'path' => '/',
          'secure' => Yii::$app->request->isSecureConnection, // Set true if using HTTPS
      ],
  ],
  

• If you're using a shared server, confirm the savePath isn't conflicting with other projects or restricted by server settings.

Make sure your user component is pointing to the right identity class and has critical settings enabled:

'user' => [
    'identityClass' => 'app\models\Users', // Double-check the namespace here
    'enableAutoLogin' => true,
    'autoRenewCookie' => true, // Ensures session cookies refresh on activity
    'loginUrl' => ['site/login'],
],

A common mistake here is typos in the identityClass namespace—even a single character off breaks everything.

Even if you think you've implemented it correctly, let's verify the critical methods (these are often the root cause):

1. findIdentity($id): Must return a valid Users instance, not an array or null:

   public static function findIdentity($id)
   {
       return static::findOne(['id' => $id]); // Ensure this queries your users table correctly
   }
   

2. getId(): Must return the user's primary key (no empty values allowed):

   public function getId()
   {
       return $this->id; // Replace with your actual primary key column name if needed
   }
   

3. Auth Key Methods: If you haven't already, make sure your users table has an auth_key column (varchar(32) works), and implement these methods:

   public function getAuthKey()
   {
       return $this->auth_key;
   }
   
   public function validateAuthKey($authKey)
   {
       return $this->auth_key === $authKey;
   }
   

   Also, generate the auth key when creating a user (add this to your model's beforeSave):

   public function beforeSave($insert)
   {
       if (parent::beforeSave($insert)) {
           if ($insert) {
               $this->auth_key = Yii::$app->security->generateRandomString();
           }
           return true;
       }
       return false;
   }
   

   Missing or invalid auth keys will cause the session to drop immediately after login.

Ensure you're passing a valid user instance to Yii::$app->user->login():

public function login()
{
    if ($this->validate()) {
        $user = $this->getUser();
        return Yii::$app->user->login($user, $this->rememberMe ? 3600*24*30 : 0);
    }
    return false;
}

public function getUser()
{
    if ($this->_user === null) {
        $this->_user = Users::findByUsername($this->username); // Confirm this finds the user correctly
    }
    return $this->_user;
}

If getUser() returns null (even if validation passes), the login will seem to work but no session is created.

Make sure your homepage isn't accidentally destroying the session or overriding user state:

• Confirm your view uses Yii::$app->user->isGuest correctly:

  <?php if (Yii::$app->user->isGuest): ?>
      <?= Html::a('Login', ['site/login']) ?>
  <?php else: ?>
      <span>Welcome, <?= Yii::$app->user->identity->username ?></span>
      <?= Html::a('Logout', ['site/logout'], ['data-method' => 'post']) ?>
  <?php endif; ?>
  

• Check your homepage controller (e.g., SiteController::actionIndex()) for any code that calls Yii::$app->session->destroy() or modifies user identity.

Since you had a working program before, do a side-by-side comparison of:

• config/web.php user/session components
• Users model code
• LoginForm model code
• Server environment (PHP version, Yii2 version, session settings in php.ini)

Often, a small accidental change (like commenting out a method or misconfiguring a path) is the culprit.

内容的提问来源于stack exchange，提问作者a.programmer