Logto and laravel 12 integration

[ilham-nasution]

Hi, i try to integrate logto and laravel 12 app. I use PHP SDK but i keep getting this error "The redirect URI in the sign-in session does not match the current request". In local it works but in production i got that error, please help 🙏

[wangsijie]

You can add logs of the URL, expecially when your production app is behind a reverse proxy, it may not able to get the correct hostname.

[ilham-nasution]

I believe I have already configured the same hostname. I have implemented SSO using Logto with several applications built using Next.js and Laravel. Upon logging into Logto, I am redirected to a Next.js module selection page offering access to various applications, including those built with Next.js and Laravel. While the Next.js application functions correctly, the Laravel application fails. I suspect this discrepancy stems from differing session management configurations between Laravel and Next.js. Do you have any recommendations for Logto configuration? I am unsure if I can solely utilize the Logto PHP SDK within my Laravel applications.

[wangsijie]

@darcyYe would you mind taking a look on this?

[darcyYe]

Would you like to share example of your NextJS app config and Laravel app config?

[ilham-nasution]

Im using next SDK and PHP SDK.
Here is my NextJS config:

export const logtoConfig = {
  endpoint: process.env.LOGTO_ENDPOINT as string,
  appId: process.env.LOGTO_APP_ID as string,
  appSecret: process.env.LOGTO_APP_SECRET,
  baseUrl: process.env.LOGTO_BASE_URL as string,
  cookieSecret: process.env.LOGTO_COOKIE_SECRET,
  cookieSecure: process.env.NODE_ENV === "production",
  scopes: [
    UserScope.OrganizationRoles,
    UserScope.Organizations,
    UserScope.CustomData,
  ],
};

Here is my Laravel config:

return new LogtoClient(
            new LogtoConfig(
                endpoint: config('logto.endpoint'),
                appId: config('logto.client_id'),
                appSecret: config('logto.client_secret'),
                scopes: [
                    UserScope::profile,
                    UserScope::roles,
                    UserScope::email,
                    UserScope::customData,
                    UserScope::organizations,
                    UserScope::organizationRoles,
                ]
            )
        );

Both use the same appId and appSecret