在单独的action中关闭csrf验证

 
use ; 
use yiibaseActionEvent; 
use yiibaseBehavior; 
use yiiwebController; 
class NoCsrf extends Behavior 
{ 
    public $actions = []; 
    public $controller; 
    public function events() 
    { 
        return [Controller::EVENT_BEFORE_ACTION => 'beforeAction']; 
    } 
    public function beforeAction($event) 
    { 
        $action = $event->action->id; 
        if(in_array($action, $this->actions)){ 
            $this->controller->enableCsrfValidation = false; 
        } 
    }     
}

 
    public function behaviors() 
    { 
        return [ 
            'csrf' => [ 
                'class' => NoCsrf::className(), 
                'controller' => $this, 
                'actions' => [ 
                    'action-name' 
                ] 
            ] 
        ]; 
    }