revenuefm/ssoguard

Laravel SSO package

v0.0.11 2018-10-30 08:37 UTC

Requires

• php: ^7.1.3
• guzzlehttp/guzzle: ^6.3

Requires (Dev)

• phpunit/phpunit: >=5.4.3
• squizlabs/php_codesniffer: ^2.3

MIT

• RevenueFM

• oauth
• SSO
• laravel

README

This package is inspired by the issue founded on on the StackOverflow.

Package is aimed towards those who wants to implement the following situations

1. Auth server on Laravel (central user directory, OAuth2 using laravel/passport)
2. Resource servers on Laravel or Lumen (web apps, no user tables)
3. Client side JS app (Nuxt, React...)

Note worth noting that the User model must exists. You just need to change the connection to the database where the Auth server is.

What is the workflow?

1. Login button on Client takes to auth server, oauth2 client is authorized by user and get auth code and redirect back to client.
2. Client then uses request to send data to resource server, with also providing the resource server the credentials.
3. Resource server with this guard authorizes the request so you can keep your API secure.

Instalation

Via composer

$ composer require revenuefm/ssoguard

After you installed the package publish the config

php artisan vendor:publish --tag=ssoguard-config

Open the config file and add the route to the me object where you are fetching the user object on Auth server. For example https://your-domain.com/api/user.

Using the guard

Simple as is, change the API guard driver in your config auth to:

'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],

        'api' => [
            'driver' => 'ssoguard',
            'provider' => 'users',
        ],
    ],

After that you can use the standard API middleware

Route::get('my/secure/api-url', 'MyController@index')->middleware('auth:api');

The user object will be available from

$request->user()

as standard one.

If somebody wants to grow this package and make it better, please involve.

Best!