Download the PHP package phattarachai/laravel-sso without Composer
On this page you can find all versions of the php package phattarachai/laravel-sso. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download phattarachai/laravel-sso
More information about phattarachai/laravel-sso
Files in phattarachai/laravel-sso
Package laravel-sso
Short Description Drop-in "Sign in with Google" for single-owner Laravel apps: an email allowlist, one owner account, a remember-forever session, and a local-only login for *.test — with a swappable Socialite driver for a self-hosted IdP later.
License MIT
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package laravel-sso
Laravel SSO
"Sign in with Google" for a fleet of single-owner Laravel apps, as a drop-in. It replaces each app's password login with three routes, an email allowlist and one owner account. Every app shares one Google OAuth client, and Google's own session makes signing in to the next app a single click.
- Allowlist, no sign-up. Every email in
SSO_ALLOWED_EMAILSsigns in as the same local user (SSO_LOGIN_AS). Any other account gets a 403, and no user row is ever created. - Remember forever. Every login sets Laravel's remember cookie, which lasts until the browser caps it (about 400 days).
- Local dev without Google. Google refuses redirect URIs on
.test, so on a dev box/loginsigns the owner straight in. It requires bothAPP_ENV=localand a local host (*.test,localhost,127.0.0.1), so a production box that was mistakenly set toAPP_ENV=localstill goes to Google. - Inertia-aware.
/loginand/logoutanswer an Inertia visit with a409+X-Inertia-Location, so the browser makes a full-page visit instead of an XHR that can't follow a cross-origin redirect. - IdP-ready. The Socialite driver is config (
SSO_DRIVER). A self-hosted IdP that ships a Socialite driver replaces Google without touching the apps.
Installation
sso:install adds the keys below to .env.example, checks that the owner user exists, and prints the redirect
URI to register on the Google OAuth client (<APP_URL>/auth/sso/callback).
Then remove the app's own login / logout routes, the password controller and the login page. The package
registers these routes itself:
| Method | URI | Name | |
|---|---|---|---|
| GET | /login |
login |
redirect to Google (or the local owner login); ?select=1 forces the account chooser |
| GET | /auth/sso/callback |
sso.callback |
allowlist check, log in the owner, redirect()->intended() |
| POST | /logout |
logout |
log out → /signed-out |
| GET | /signed-out |
sso.signed-out |
"You're signed out" page with a sign-in link |
The auth middleware already redirects guests to the route named login, so nothing else needs to change. API,
webhook and broadcasting routes are untouched: only the web session login changes.
Google OAuth client
In the Google Cloud Console, create one OAuth client of type Web application and share it across every app:
- Consent screen: External, with the
openid,emailandprofilescopes only. Those need no Google verification. - Authorized redirect URIs: one line per app, e.g.
https://notes.example.app/auth/sso/callback.
Google has no API or gcloud command for Web OAuth clients, so adding an app means adding its redirect URI in the Console.
Configuration
php artisan vendor:publish --tag=sso-config publishes config/sso.php. It sets the driver, guard, home URL,
the local-login switch and the local host patterns. The rejected and signed-out pages are plain Blade with no
build step (--tag=sso-views).
Testing
License
The MIT License (MIT). Please see License File for more information.
All versions of laravel-sso with dependencies
illuminate/auth Version ^12.0|^13.0
illuminate/console Version ^12.0|^13.0
illuminate/http Version ^12.0|^13.0
illuminate/support Version ^12.0|^13.0
laravel/socialite Version ^5.28
spatie/laravel-package-tools Version ^1.16