304 lines
9.4 KiB
PHP
304 lines
9.4 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Auth;
|
|
|
|
use App\Facade\Theme;
|
|
use App\Facade\UserConfig;
|
|
use App\Helpers\MiscHelper;
|
|
use App\Http\Controllers\Controller;
|
|
use App\User;
|
|
use Illuminate\Contracts\Routing\UrlGenerator;
|
|
use Illuminate\Foundation\Auth\AuthenticatesUsers;
|
|
use Illuminate\Http\Request;
|
|
use Laravel\Socialite\One\TwitterProvider;
|
|
use Laravel\Socialite\Two\FacebookProvider;
|
|
use Laravel\Socialite\Two\GoogleProvider;
|
|
use League\OAuth1\Client\Server\Twitter as TwitterServer;
|
|
use Socialite;
|
|
|
|
class LoginController extends Controller
|
|
{
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Login Controller
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| This controller handles authenticating users for the application and
|
|
| redirecting them to your home screen. The controller uses a trait
|
|
| to conveniently provide its functionality to your applications.
|
|
|
|
|
*/
|
|
|
|
use AuthenticatesUsers;
|
|
|
|
/**
|
|
* @var UrlGenerator
|
|
*/
|
|
protected $generator;
|
|
|
|
/**
|
|
* Where to redirect users after login / registration.
|
|
*
|
|
* @var string
|
|
*/
|
|
protected $redirectTo = '/me';
|
|
|
|
/**
|
|
* Create a new controller instance.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function __construct(UrlGenerator $generator)
|
|
{
|
|
$this->middleware('guest', ['except' => 'logout']);
|
|
$this->generator = $generator;
|
|
}
|
|
|
|
public function logout(Request $request)
|
|
{
|
|
$this->guard()->logout();
|
|
|
|
$request->session()->invalidate();
|
|
|
|
return redirect()->back();
|
|
}
|
|
|
|
protected function attemptLogin(Request $request)
|
|
{
|
|
$isSuccessful = $this->guard()->attempt($this->credentials($request));
|
|
|
|
if ($isSuccessful)
|
|
{
|
|
/** @var User $user */
|
|
$user = $this->guard()->user();
|
|
|
|
// Update the social media ID if successful login and it was referred by the SSO provider
|
|
$loginData = $request->getSession()->get('ssoLoginData');
|
|
if (!is_null($loginData))
|
|
{
|
|
unset($loginData['name']);
|
|
unset($loginData['email']);
|
|
$user->fill($loginData);
|
|
$user->save();
|
|
|
|
$request->getSession()->remove('ssoLoginData');
|
|
}
|
|
}
|
|
|
|
return $isSuccessful;
|
|
}
|
|
|
|
protected function credentials(Request $request)
|
|
{
|
|
$result = $request->only($this->username(), 'password');
|
|
|
|
// Only allow activated users to login
|
|
$result['is_activated'] = true;
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Show the application's login form.
|
|
*
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function showLoginForm(Request $request)
|
|
{
|
|
$previousUrl = MiscHelper::ensureHasTrailingSlash($this->generator->previous(false));
|
|
$homeUrl = MiscHelper::ensureHasTrailingSlash(route('home'));
|
|
|
|
if (UserConfig::get('social_user_feeds') && (empty($previousUrl) || $previousUrl == $homeUrl))
|
|
{
|
|
$previousUrl = route('userActivityFeed');
|
|
}
|
|
|
|
$request->getSession()->put('url.intended', $previousUrl);
|
|
|
|
return Theme::render('auth.v2_unified', [
|
|
'active_tab' => 'login',
|
|
'info' => $request->session()->get('info'),
|
|
'is_sso' => false
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Show the application's login form (for a social media-linked account).
|
|
*
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function showLoginFormSso(Request $request)
|
|
{
|
|
// Social media login info
|
|
$loginData = $request->getSession()->get('ssoLoginData');
|
|
if (is_null($loginData))
|
|
{
|
|
// No SSO data in session, use the normal login screen
|
|
return redirect(route('login'));
|
|
}
|
|
|
|
return Theme::render('auth.v2_unified', [
|
|
'active_tab' => 'login',
|
|
'info' => $request->session()->get('info'),
|
|
'is_sso' => true,
|
|
'login_data' => $loginData
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Redirect the user to the Facebook authentication page.
|
|
*
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function redirectToFacebook()
|
|
{
|
|
$socialite = $this->setSocialiteConfigs();
|
|
return $socialite->driver('facebook')->redirect();
|
|
}
|
|
|
|
/**
|
|
* Redirect the user to the Google authentication page.
|
|
*
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function redirectToGoogle()
|
|
{
|
|
$socialite = $this->setSocialiteConfigs();
|
|
return $socialite->driver('google')->redirect();
|
|
}
|
|
|
|
/**
|
|
* Redirect the user to the Twitter authentication page.
|
|
*
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function redirectToTwitter()
|
|
{
|
|
$socialite = $this->setSocialiteConfigs();
|
|
return $socialite->driver('twitter')->redirect();
|
|
}
|
|
|
|
/**
|
|
* Obtain the user information from Facebook.
|
|
*
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function handleFacebookCallback(Request $request)
|
|
{
|
|
$socialite = $this->setSocialiteConfigs();
|
|
$facebookUser = $socialite->driver('facebook')->user();
|
|
|
|
return $this->processSocialMediaLogin($request, 'facebook_id', $facebookUser);
|
|
}
|
|
|
|
/**
|
|
* Obtain the user information from Google.
|
|
*
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function handleGoogleCallback(Request $request)
|
|
{
|
|
$socialite = $this->setSocialiteConfigs();
|
|
$googleUser = $socialite->driver('google')->user();
|
|
|
|
return $this->processSocialMediaLogin($request, 'google_id', $googleUser);
|
|
}
|
|
|
|
/**
|
|
* Obtain the user information from Twitter.
|
|
*
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function handleTwitterCallback(Request $request)
|
|
{
|
|
$socialite = $this->setSocialiteConfigs();
|
|
$twitterUser = $socialite->driver('twitter')->user();
|
|
|
|
return $this->processSocialMediaLogin($request, 'twitter_id', $twitterUser);
|
|
}
|
|
|
|
private function processSocialMediaLogin(Request $request, $socialMediaIdField, $socialMediaUser)
|
|
{
|
|
$userBySocialMediaId = User::where($socialMediaIdField, $socialMediaUser->getId())->first();
|
|
|
|
if (!is_null($userBySocialMediaId))
|
|
{
|
|
// We have an existing user for this Facebook ID - log them in
|
|
$this->guard()->login($userBySocialMediaId);
|
|
return redirect(route('home'));
|
|
}
|
|
|
|
// Some providers (*cough*Twitter*cough*) don't give e-mail addresses without explicit permission/additional
|
|
// verification
|
|
if (!is_null($socialMediaUser->email))
|
|
{
|
|
$userByEmailAddress = User::where('email', $socialMediaUser->getEmail())->first();
|
|
|
|
if (!is_null($userByEmailAddress))
|
|
{
|
|
// We have an existing user with the e-mail address associated with the Facebook account
|
|
// Prompt for the password for that account
|
|
$request->getSession()->put('ssoLoginData', [
|
|
'name' => $socialMediaUser->getName(),
|
|
'email' => $socialMediaUser->getEmail(),
|
|
$socialMediaIdField => $socialMediaUser->getId(),
|
|
'is_activated' => true
|
|
]);
|
|
|
|
return redirect(route('auth.login_sso'));
|
|
}
|
|
}
|
|
|
|
// We don't have an existing user - prompt for registration
|
|
$request->getSession()->put('ssoRegisterData', [
|
|
'name' => $socialMediaUser->getName(),
|
|
'email' => $socialMediaUser->getEmail(),
|
|
$socialMediaIdField => $socialMediaUser->getId(),
|
|
'is_activated' => true
|
|
]);
|
|
|
|
return redirect(route('auth.register_sso'));
|
|
}
|
|
|
|
private function setSocialiteConfigs()
|
|
{
|
|
// Force Socialite to use our config from the database instead of hard-coded in config/services.php
|
|
$socialite = app()->make(\Laravel\Socialite\Contracts\Factory::class);
|
|
$socialite->extend(
|
|
'facebook',
|
|
function ($app) use ($socialite) {
|
|
$config = [
|
|
'client_id' => trim(UserConfig::get('facebook_app_id')),
|
|
'client_secret' => trim(decrypt(UserConfig::get('facebook_app_secret'))),
|
|
'redirect' => route('login_callback.facebook')
|
|
];
|
|
return $socialite->buildProvider(FacebookProvider::class, $config);
|
|
}
|
|
);
|
|
$socialite->extend(
|
|
'google',
|
|
function ($app) use ($socialite) {
|
|
$config = [
|
|
'client_id' => trim(UserConfig::get('google_app_id')),
|
|
'client_secret' => trim(decrypt(UserConfig::get('google_app_secret'))),
|
|
'redirect' => route('login_callback.google')
|
|
];
|
|
return $socialite->buildProvider(GoogleProvider::class, $config);
|
|
}
|
|
);
|
|
$socialite->extend(
|
|
'twitter',
|
|
function ($app) use ($socialite) {
|
|
$config = [
|
|
'identifier' => trim(UserConfig::get('twitter_app_id')),
|
|
'secret' => trim(decrypt(UserConfig::get('twitter_app_secret'))),
|
|
'callback_uri' => route('login_callback.twitter')
|
|
];
|
|
return new TwitterProvider($app['request'], new TwitterServer($config));
|
|
}
|
|
);
|
|
|
|
return $socialite;
|
|
}
|
|
}
|