[ 'class' => CompositeAuth::class, 'authMethods' => [ ['class' => HttpBearerAuth::class], ['class' => QueryParamAuth::class, 'tokenParam' => 'accessToken'], ] ], 'exceptionFilter' => [ 'class' => ErrorToExceptionFilter::class ], 'corsFilter' => [ 'class' => \yii\filters\Cors::class, ], ]); } }