HttpBearerAuth::class, 'user' => Yii::$app->getUser(), ]; // XML and rate limiter is not necessary unset( $parentBehaviors['contentNegotiator']['formats']['application/xml'], $parentBehaviors['rateLimiter'], ); return $parentBehaviors; } }