Merge pull request #96 from LittleHans8/main

Compatible with Stateless Authentication

README.md

@@ -258,6 +258,17 @@ You can add [optional parameters](https://laravel.com/docs/10.x/socialite#option
 ]
 ```
 
+## Stateless Authentication
+You can add `stateless` parameters to the provider configuration in the config/services.php config file, for example:
+
+```php
+'apple' => [
+    'client_id' => '...',
+    'client_secret' => '...',
+    'stateless'=>true,
+]
+```
+
 **Note:** you cannot use the `state` parameter, as it is used to determine from which Filament panel the user came from.
 
 ## Changelog

routes/web.php

@@ -26,7 +26,7 @@
     }
 }
 
-Route::get("/oauth/callback/{provider}", [SocialiteLoginController::class, 'processCallback'])
+Route::match(['get', 'post'], '/oauth/callback/{provider}', [SocialiteLoginController::class, 'processCallback'])
     ->middleware([
         PanelFromUrlQuery::class,
         ...config('filament-socialite.middleware'),

src/FilamentSocialite.php

@@ -83,6 +83,11 @@ public function getProviderScopes(string $provider): string | array
         return $this->getProviderConfig($provider)['scopes'] ?? [];
     }
 
+    public function getProviderStateless(string $provider): bool
+    {
+        return $this->getProviderConfig($provider)['stateless'] ?? false;
+    }
+
     /**
      * @return array<string, mixed>
      */

src/Http/Controllers/SocialiteLoginController.php

@@ -54,8 +54,12 @@ public function redirectToProvider(string $provider): RedirectResponse
 
     protected function retrieveOauthUser(string $provider): ?SocialiteUserContract
     {
+        $stateless = $this->socialite->getProviderStateless($provider);
         try {
-            return Socialite::driver($provider)->user();
+            /** @var \Laravel\Socialite\Two\AbstractProvider $driver */
+            $driver = Socialite::driver($provider);
+
+            return $stateless ? $driver->stateless()->user() : $driver->user();
         } catch (InvalidStateException $e) {
             Events\InvalidState::dispatch($e);
         }

src/Http/Middleware/PanelFromUrlQuery.php

@@ -28,11 +28,11 @@ public static function encrypt(string $panel): string
     public static function decrypt(Request $request): string
     {
         try {
-            if (! is_string($request->query('state'))) {
+            if (! is_string($request->get('state'))) {
                 throw new DecryptException('State is not a string.');
             }
 
-            return Crypt::decrypt($request->query('state'));
+            return Crypt::decrypt($request->get('state'));
         } catch (DecryptException $e) {
             throw InvalidCallbackPayload::make($e);
         }