Merge pull request #85 from joselfonseca/feature/80-socialite

Add socialite integration

Author: joselfonseca

app/Models/SocialProvider.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+
+class SocialProvider extends Model
+{
+    use HasFactory;
+
+    protected $fillable = [
+        'user_id',
+        'provider',
+        'provider_id',
+    ];
+
+    public function user()
+    {
+        return $this->belongsTo(User::class);
+    }
+}

app/Models/User.php

@@ -3,11 +3,13 @@
 namespace App\Models;
 
 use App\Support\HasRolesUuid;
+use App\Support\HasSocialLogin;
 use App\Support\UuidScopeTrait;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\SoftDeletes;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
+use Illuminate\Support\Facades\Hash;
 use Laravel\Passport\HasApiTokens;
 use Spatie\Permission\Traits\HasRoles;
 
@@ -16,7 +18,7 @@
  */
 class User extends Authenticatable
 {
-    use Notifiable, UuidScopeTrait, HasFactory, HasApiTokens, HasRoles, SoftDeletes, HasRolesUuid {
+    use Notifiable, UuidScopeTrait, HasFactory, HasApiTokens, HasRoles, SoftDeletes, HasSocialLogin, HasRolesUuid {
         HasRolesUuid::getStoredRole insteadof HasRoles;
     }
 
@@ -51,14 +53,15 @@ class User extends Authenticatable
         'remember_token',
     ];
 
-    /**
-     * @param array $attributes
-     * @return \Illuminate\Database\Eloquent\Model
-     */
+    public function socialProviders()
+    {
+        return $this->hasMany(SocialProvider::class);
+    }
+
     public static function create(array $attributes = [])
     {
         if (array_key_exists('password', $attributes)) {
-            $attributes['password'] = bcrypt($attributes['password']);
+            $attributes['password'] = Hash::make($attributes['password']);
         }
 
         $model = static::query()->create($attributes);

app/OAuthGrants/SocialGrant.php

@@ -0,0 +1,97 @@
+<?php
+
+namespace App\OAuthGrants;
+
+use DateInterval;
+use Illuminate\Http\Request;
+use Laravel\Passport\Bridge\User;
+use League\OAuth2\Server\Entities\UserEntityInterface;
+use League\OAuth2\Server\Exception\OAuthServerException;
+use League\OAuth2\Server\Grant\AbstractGrant;
+use League\OAuth2\Server\Repositories\RefreshTokenRepositoryInterface;
+use League\OAuth2\Server\Repositories\UserRepositoryInterface;
+use League\OAuth2\Server\RequestEvent;
+use League\OAuth2\Server\ResponseTypes\ResponseTypeInterface;
+use Psr\Http\Message\ServerRequestInterface;
+
+class SocialGrant extends AbstractGrant
+{
+    public function __construct(UserRepositoryInterface $userRepository, RefreshTokenRepositoryInterface $refreshTokenRepository)
+    {
+        $this->setUserRepository($userRepository);
+        $this->setRefreshTokenRepository($refreshTokenRepository);
+        $this->refreshTokenTTL = new DateInterval('P1M');
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function respondToAccessTokenRequest(ServerRequestInterface $request, ResponseTypeInterface $responseType, DateInterval $accessTokenTTL)
+    {
+        // Validate request
+        $client = $this->validateClient($request);
+        $scopes = $this->validateScopes($this->getRequestParameter('scope', $request));
+        $user = $this->validateUser($request);
+        // Finalize the requested scopes
+        $scopes = $this->scopeRepository->finalizeScopes($scopes, $this->getIdentifier(), $client, $user->getIdentifier());
+        // Issue and persist new tokens
+        $accessToken = $this->issueAccessToken($accessTokenTTL, $client, $user->getIdentifier(), $scopes);
+        $refreshToken = $this->issueRefreshToken($accessToken);
+        // Inject tokens into response
+        $responseType->setAccessToken($accessToken);
+        $responseType->setRefreshToken($refreshToken);
+
+        return $responseType;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getIdentifier()
+    {
+        return 'social_grant';
+    }
+
+    /**
+     * @param ServerRequestInterface $request
+     *
+     * @throws OAuthServerException
+     *
+     * @return UserEntityInterface
+     */
+    protected function validateUser(ServerRequestInterface $request)
+    {
+        $laravelRequest = new Request($request->getParsedBody());
+        $user = $this->getUserEntityByRequest($laravelRequest);
+        if (false === $user instanceof UserEntityInterface) {
+            $this->getEmitter()->emit(new RequestEvent(RequestEvent::USER_AUTHENTICATION_FAILED, $request));
+
+            throw OAuthServerException::invalidCredentials();
+        }
+
+        return $user;
+    }
+
+    /**
+     * Retrieve user by request.
+     *
+     * @param \Illuminate\Http\Request $request
+     *
+     * @throws \League\OAuth2\Server\Exception\OAuthServerException
+     *
+     * @return null|\Laravel\Passport\Bridge\User
+     */
+    protected function getUserEntityByRequest(Request $request)
+    {
+        if (is_null($model = config('auth.providers.users.model'))) {
+            throw OAuthServerException::serverError('Unable to determine user model from configuration.');
+        }
+        if (method_exists($model, 'byOAuthToken')) {
+            $user = (new $model())->byOAuthToken($request);
+        } else {
+            throw OAuthServerException::serverError('Unable to find byLoggedInUser method on user model.');
+        }
+
+        return ($user) ? new User($user->id) : null;
+    }
+}

app/Providers/AuthServiceProvider.php

@@ -2,9 +2,13 @@
 
 namespace App\Providers;
 
+use App\OAuthGrants\SocialGrant;
 use Carbon\Carbon;
 use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
+use Laravel\Passport\Bridge\RefreshTokenRepository;
+use Laravel\Passport\Bridge\UserRepository;
 use Laravel\Passport\Passport;
+use League\OAuth2\Server\AuthorizationServer;
 
 class AuthServiceProvider extends ServiceProvider
 {
@@ -25,8 +29,32 @@ class AuthServiceProvider extends ServiceProvider
     public function boot()
     {
         $this->registerPolicies();
+        $this->extendAuthorizationServer();
         Passport::routes();
         Passport::tokensExpireIn(Carbon::now()->addHours(24));
         Passport::refreshTokensExpireIn(Carbon::now()->addDays(60));
     }
+
+    protected function makeSocialRequestGrant()
+    {
+        $grant = new SocialGrant(
+            $this->app->make(UserRepository::class),
+            $this->app->make(RefreshTokenRepository::class)
+        );
+        $grant->setRefreshTokenTTL(Passport::refreshTokensExpireIn());
+
+        return $grant;
+    }
+
+    protected function extendAuthorizationServer()
+    {
+        $this->app->extend(AuthorizationServer::class, function ($server) {
+            return tap($server, function ($server) {
+                $server->enableGrantType(
+                    $this->makeSocialRequestGrant(),
+                    Passport::tokensExpireIn()
+                );
+            });
+        });
+    }
 }

app/Support/HasSocialLogin.php

@@ -0,0 +1,42 @@
+<?php
+
+namespace App\Support;
+
+use App\Models\SocialProvider;
+use Illuminate\Database\Eloquent\ModelNotFoundException;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
+use Laravel\Socialite\Facades\Socialite;
+
+trait HasSocialLogin
+{
+    public static function byOAuthToken(Request $request)
+    {
+        $userData = Socialite::driver($request->get('provider'))->userFromToken($request->get('token'));
+
+        try {
+            $user = static::whereHas('socialProviders', function ($query) use ($request, $userData) {
+                $query->where('provider', Str::lower($request->get('provider')))->where('provider_id', $userData->getId());
+            })->firstOrFail();
+        } catch (ModelNotFoundException $e) {
+            $user = static::where('email', $userData->getEmail())->first();
+            if (! $user) {
+                $user = static::create([
+                    'name' => $userData->getName(),
+                    'email' => $userData->getEmail(),
+                    'uuid' => Str::uuid(),
+                    'password' => Hash::make(Str::random(16)),
+                    'email_verified_at' => now(),
+                ]);
+            }
+            SocialProvider::create([
+                'user_id' => $user->id,
+                'provider' => $request->get('provider'),
+                'provider_id' => $userData->getId(),
+            ]);
+        }
+
+        return $user;
+    }
+}

composer.json

@@ -27,6 +27,7 @@
         "intervention/imagecache": "^2.4",
         "laravel/framework": "^8.0",
         "laravel/passport": "^10.0",
+        "laravel/socialite": "^5.1",
         "laravel/tinker": "^2.0",
         "spatie/laravel-fractal": "^5.8",
         "spatie/laravel-permission": "^3.17"