Laravel Socialite Authentication

Social Authentication#

• Google OAuth Integration: Sign in with Google accounts
• GitHub OAuth Integration: Authenticate using GitHub credentials
• Seamless User Experience: One-click social login
• Account Linking: Connect multiple social accounts to a single user profile

Built-in Authentication System#

• Livewire Starter Kit: Laravel’s official authentication scaffolding
• User Registration: Traditional email/password registration option
• Login System: Secure authentication with session management
• Profile Management: Update user information and preferences
• Password Reset: Email-based password recovery

Security Features#

• OAuth 2.0 Protocol: Industry-standard authentication
• CSRF Protection: Cross-site request forgery prevention
• Secure Token Handling: Safe storage of access tokens
• Session Security: Protected user sessions
• Email Verification: Optional email confirmation

Prerequisites#

1
- PHP >= 8.1
2
- Composer
3
- MySQL/PostgreSQL/SQLite
4
- Node.js & npm

Quick Start Guide#

1. Clone the Repository

1
git clone https://github.com/mustafa-salah-1/laravel-socialite.git
2
cd laravel-socialite

2. Install Dependencies

1
composer install
2
npm install
3
npm run dev

3. Environment Configuration

1
cp .env.example .env
2
php artisan key:generate

4. Database Setup

1
php artisan migrate

5. Configure Social Providers

1
GOOGLE_CLIENT_ID="your-google-client-id"
2
GOOGLE_CLIENT_SECRET="your-google-client-secret"

1
GITHUB_CLIENT_ID="your-github-client-id"
2
GITHUB_CLIENT_SECRET="your-github-client-secret"

1
'github' => [
2
    'client_id' => env('GITHUB_CLIENT_ID'),
3
    'client_secret' => env('GITHUB_CLIENT_SECRET'),
4
    'redirect' => 'http://localhost:8000/auth/github/callback',
5
],
6

7
'google' => [
8
    'client_id' => env('GOOGLE_CLIENT_ID'),
9
    'client_secret' => env('GOOGLE_CLIENT_SECRET'),
10
    'redirect' => 'http://localhost:8000/auth/google/callback',
11
],

1
php artisan serve

OAuth Flow Implementation#

The application implements a secure OAuth 2.0 flow:

1. User clicks “Sign in with Google/GitHub”
2. Redirect to provider’s authorization page
3. User grants permission
4. Provider redirects back with authorization code
5. Exchange code for access token
6. Retrieve user information
7. Create or update user account
8. Authenticate user session

Database Schema#

User table includes:

• Traditional fields (name, email, password)
• Social authentication fields (provider, provider_id)
• Timestamps and email verification status

Login Page Features#

• Clean and modern design
• Social login buttons (Google & GitHub)
• Traditional email/password form
• “Remember me” functionality
• Forgot password link
• Registration link

Registration Page#

• User-friendly form layout
• Email validation
• Password strength indicators
• Agree to terms checkbox
• Alternative social registration

Profile Management#

• Update personal information
• Change password
• Connected social accounts
• Account security settings

Authentication Flow#

1
User Request → Social Provider → Callback → Socialite Handler
2
→ User Creation/Update → Session Creation → Dashboard

Security Layers#

1. OAuth 2.0 Protocol: Secure delegated access
2. Laravel Authentication: Built-in security features
3. HTTPS Enforcement: Encrypted data transmission (production)
4. Token Encryption: Secure storage of sensitive data
5. Rate Limiting: Prevent brute-force attacks

Extensibility#

The application is designed to easily add more OAuth providers:

• Facebook
• Twitter/X
• LinkedIn
• Microsoft
• Apple