[ 'class' => CompositeAuth::className(), 'authMethods' => [ ['class' => HttpBearerAuth::className()], ['class' => QueryParamAuth::className(), 'tokenParam' => 'access-token'] ] ], 'exceptionFilter' => [ 'class' => ErrorToExceptionFilter::className() ], ]); } }