yii使用Ouath2忽略方法走认证不起效 [ 2.0 版本 ]

父类

public function behaviors()
	{
		$behaviors = parent::behaviors();

		$behaviors = array_merge([
			'corsFilter' => [
				'class' => 'yii\filters\Cors',
			],
			'exceptionFilter' => [
                'class' => ErrorToExceptionFilter::className()
            ],
		], $behaviors);

		$behaviors['authenticator'] = [
			'class'       => CompositeAuth::className(),
			'authMethods' => [
                ['class' => HttpBearerAuth::className()],
            ]
		];
		$behaviors['authenticator']['except'] = ['options'];


		return $behaviors;
	}

控制器行为 继承父类

public function behaviors()
    {
        $behaviors = parent::behaviors();
        $behaviors['authenticator']['optional'] = ['index'];
        return $behaviors;
    }

将optional替换成except则可以完全忽略认证。
使用optional请求会抛出一个错误