Download the PHP package socialiteproviders/steam without Composer
On this page you can find all versions of the php package socialiteproviders/steam. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package steam
Steam
Installation & Basic Usage
Please see the Base Installation Guide, then follow the provider specific instructions below.
Add configuration to config/services.php
allowed_hosts
Set this for protect against authorization domain spoofing. When the user returns from the Steam login page, along with the OpenID validation, the return_to parameter will be checked against the available domains in allowed_hosts.
If you don't specify the setting, then fraudsters have the opportunity to enter the application under other users
Issue resolved in https://github.com/SocialiteProviders/Providers/pull/817
By default this protection is disabled. It will only be active when allowed hosts is not equal to an empty array.
return_to validation
The signed openid.return_to must exactly match the provider's redirect URL. If you override it with redirectUrl() when redirecting to Steam, set the same URL before calling user() on the callback.
The callback also checks that the assertion came from Steam's OpenID endpoint, that Steam signed the required fields, and that Steam's verification response is a valid OpenID 2.0 reply.
Replay protection
Each login's openid.response_nonce must be within 5 minutes of your server's clock and can only be used once. Used nonces are kept in your default cache store for 10 minutes. The null store skips the replay check. If you run more than one server, use a shared store (Redis, database, etc.):
force_https
Set this property to force HTTPS scheme when redirecting from Steam OAuth.
If you do not set it, the scheme will be inferred from your server settings.
Add provider event listener
Configure the package's listener to listen for SocialiteWasCalled events.
Add the event to your listen[] array in app/Providers/EventServiceProvider. See the Base Installation Guide for detailed instructions.
Usage
You should now be able to use the provider like you would regularly use Socialite (assuming you have the facade installed):
Returned User fields
idnicknamenameavatar
