Laravel Socialite
Upgrading Socialite
When upgrading to a new major version of Socialite, it’s important that you carefully review the upgrade guide.
Installation
To get started with Socialite, use Composer to add the package to your project’s dependencies:
Before using Socialite, you will also need to add credentials for the OAuth services your application utilizes. These credentials should be placed in your configuration file, and should use the key facebook
, twitter
, linkedin
, google
, github
, gitlab
or bitbucket
, depending on the providers your application requires. For example:
'github' => [
'client_id' => env('GITHUB_CLIENT_ID'),
'client_secret' => env('GITHUB_CLIENT_SECRET'),
'redirect' => 'http://your-callback-url',
],
Routing
<?php
namespace App\Http\Controllers\Auth;
use App\Http\Controllers\Controller;
use Laravel\Socialite\Facades\Socialite;
class LoginController extends Controller
{
/**
* Redirect the user to the GitHub authentication page.
*
*/
public function redirectToProvider()
{
return Socialite::driver('github')->redirect();
}
/**
* Obtain the user information from GitHub.
*
* @return \Illuminate\Http\Response
*/
public function handleProviderCallback()
{
$user = Socialite::driver('github')->user();
}
}
The redirect
method takes care of sending the user to the OAuth provider, while the user
method will read the incoming request and retrieve the user’s information from the provider.
You will need to define routes to your controller methods:
Optional Parameters
A number of OAuth providers support optional parameters in the redirect request. To include any optional parameters in the request, call the with
method with an associative array:
return Socialite::driver('google')
->with(['hd' => 'example.com'])
->redirect();
Before redirecting the user, you may also add additional “scopes” on the request using the scopes
method. This method will merge all existing scopes with the ones you supply:
return Socialite::driver('github')
->scopes(['read:user', 'public_repo'])
->redirect();
Stateless Authentication
The stateless
method may be used to disable session state verification. This is useful when adding social authentication to an API:
return Socialite::driver('google')->stateless()->user();
Retrieving User Details
Once you have a user instance, you can grab a few more details about the user:
$user = Socialite::driver('github')->user();
// OAuth Two Providers
$token = $user->token;
$refreshToken = $user->refreshToken; // not always provided
$expiresIn = $user->expiresIn;
// OAuth One Providers
$token = $user->token;
$tokenSecret = $user->tokenSecret;
// All Providers
$user->getId();
$user->getNickname();
$user->getName();
$user->getEmail();
$user->getAvatar();
Retrieving User Details From A Token (OAuth2)
If you already have a valid access token for a user, you can retrieve their details using the userFromToken
method:
Retrieving User Details From A Token And Secret (OAuth1)
If you already have a valid pair of token / secret for a user, you can retrieve their details using the userFromTokenAndSecret
method: