1. Form validation reference document ide/2.0/start-forms" rel=" nofollow noreferrer "> https://www.yiichina.com/doc/.
2. As long as the data you want to verify conforms to the form array format, you can also verify
3. If you only provide API services, you don't need to use session.
4. APIs are authenticated through access_token, and session is not needed without browsers

1: check and receive data

   `if ($model->load(Yii::$app->request->post()) && $model->validate()) {
        //  $model 
    }`

access_token authentication is used for 2:api. Jwt is commonly used at present.

API, please try not to use session, or there will be problems with server expansion and so on. The
interface can be validated with the form model that comes with Yii2. With dependency injection, cool and unwanted

    public function actionBargin(BarginOrderForm $form)
    {
        $data = $form->attributes;
        $data['src_id'] = $form->bargin_id;
        $data['src_type'] = Order::SRC_BARGIN;

        return OrderManager::buyPromotionGoods($data, $form->user_id, $form->corporation_id, '');
    }