|string> [filter_name => classname] * or [filter_name => [classname1, classname2, ...]] * @phpstan-var array> */ public array $aliases = [ 'csrf' => CSRF::class, 'toolbar' => DebugToolbar::class, 'honeypot' => Honeypot::class, 'invalidchars' => InvalidChars::class, 'secureheaders' => SecureHeaders::class, 'authMVC' => AuthMVC::class, 'HttpRequestLog' => HttpRequestLog::class, 'authJWT' => AuthJWT::class, 'CloseDbConnection' => CloseDbConnection::class ]; /** * List of filter aliases that are always * applied before and after every request. * * @var array>>|array> * @phpstan-var array>|array>> */ public array $globals = [ 'before' => [ 'HttpRequestLog' => ['except' => 'cli/*'], // 'csrf', // 'invalidchars', ], 'after' => [ 'CloseDbConnection' // 'secureheaders', ], ]; /** * List of filter aliases that works on a * particular HTTP method (GET, POST, etc.). * * Example: * 'post' => ['foo', 'bar'] * * If you use this, you should disable auto-routing because auto-routing * permits any HTTP method to access a controller. Accessing the controller * with a method you don't expect could bypass the filter. */ public array $methods = []; /** * List of filter aliases that should run on any * before or after URI patterns. * * Example: * 'isLoggedIn' => ['before' => ['account/*', 'profiles/*']] */ public array $filters = []; }