Download the PHP package siberfx/facebook-autopost without Composer

Facebook Autopost for Laravel

Connect one Facebook Page to your Laravel app and share your models to it — automatically when they go live, or whenever you choose. Posts go to the Page feed through the Graph API as link posts.

• One Facebook Page per app, connected by an admin with Facebook Login.
• Auto-post when a model becomes live, at most once, off until you switch it on.
• Ready-made connection card and share button (Tailwind or Bootstrap 5, Blade or Livewire), plus routes, JSON endpoints, Artisan commands and events if you prefer to build your own.
• Headless mode (FACEBOOK_UI=false) when you want the package without any UI.
• Optional Telegram, Slack and email messages on every post, failed share and expiring token.

Requires PHP 8.4+ and Laravel 12 or 13.

Contents

• 1. Set up the Facebook app
• 2. Install
• 3. Connect
• 4. Make a model shareable
• 5. Share on demand
• 6. Ready-made UI
• 7. Events
• 8. Commands
• 9. Notifications
• 10. Headless: no UI
• 11. Configuration reference
• 12. Troubleshooting

1. Set up the Facebook app

1. Create a Business app at https://developers.facebook.com/apps (use the Other or Business type).
2. Add the Facebook Login product. Under its settings, add your callback URL to Valid OAuth Redirect URIs, exactly as the app will send it, e.g. https://example.com/facebook/callback. Add one per environment.
3. Copy the App ID and App Secret from Settings → Basic.
4. Permissions: the connecting account must be an admin of the Page. The app needs pages_show_list, pages_manage_posts and pages_read_engagement. While the app is in Development mode these work for people with a role on the app; for other admins, submit the app for App Review.

"URL Blocked: This redirect failed because the redirect URI is not whitelisted" on Facebook's page means the URL sent is not in Valid OAuth Redirect URIs. Run php artisan route:list --name=facebook-autopost.callback, or set FACEBOOK_REDIRECT_URI to the URL you registered.

2. Install

facebook:install options:

To publish pieces by hand:

.env:

Required: say who may manage Facebook. Connecting, disconnecting, seeing the connection and sharing are all guarded by the manage-facebook-autopost gate. The package denies everyone until your app defines it, for example in AppServiceProvider::boot():

The routes sit behind ['web', 'auth', 'can:manage-facebook-autopost'], and the Livewire actions check the same gate.

3. Connect

Send an admin to route('facebook-autopost.redirect'). After Facebook's consent screen they land on after_connect with one of these query values:

The connection card and <x-facebook-autopost::flash /> turn these into messages for you.

The Page is chosen when connecting: FACEBOOK_PAGE_ID when set, otherwise the first Page the account manages. The Page access token is stored encrypted. Page tokens derived from a long-lived user token do not expire, so the package never refreshes them; if Facebook revokes the app, the status turns expired and you connect again.

connection() asks Facebook (debug_token and the Page's name and picture) at most once every status_cache_ttl seconds (300 by default). isConnected() only checks that a token is stored.

4. Make a model shareable

• isLiveForFacebook() — whether the public can see the model right now. It decides when auto-post fires (the save on which it turns from false to true) and whether a manual share is allowed.
• toFacebookPost() — what to post. FacebookPost::make($url, $title) is the link; commentary() is the message, where {title} and {url} are filled in (default: {title}).

FacebookPost is immutable: each method returns a copy.

With FACEBOOK_AUTO_POST=true, an Article is queued for Facebook when it is created published or changes from draft to published — once. Editing a published article does not post again. Seeders and Artisan commands do not auto-post (set autopost.in_console to allow it). Mass update() queries and saveQuietly() do not fire model events, so they do not auto-post.

Run a queue worker. The job is dispatched after the database transaction commits, is unique per model while it waits, and retries when Facebook is busy or unreachable (429, 5xx, network). A request Facebook refuses outright (400 with an invalid token, 403 …) fails at once, without retries.

5. Share on demand

share() throws NotConnected, NotShareable (not live), FacebookRequestFailed (Facebook's message, with isUnauthorized() and isPermanent()), or InvalidArgumentException (an invalid URL). A post Facebook accepted without returning its id is recorded as posted with a null post_id.

6. Ready-made UI

Everything is rendered with resources/views/tailwind or resources/views/bootstrap (FACEBOOK_UI_THEME).

7. Events

8. Commands

Schedule facebook:check-token daily if you want an alert before a token expires.

9. Notifications

Messages to Telegram, Slack and/or email when a post goes out, an automatic share gives up, or the token is about to expire. A failing channel never fails the share.

Your own channel implements Siberfx\FacebookAutopost\Contracts\NotificationChannel and is listed under notifications.channels in the config.

10. Headless: no UI

FACEBOOK_UI=false (or facebook:install --headless) registers no views, Blade or Livewire components, and the routes answer JSON only. Use the facade, the events and the JSON endpoints yourself:

11. Configuration reference

12. Troubleshooting