Building OAuth 2.0 "Single Sign On" SSO Server in PHP (Laravel) - Part 2

[@callmezorkkk]

{"error":"invalid_client","error_description":"Client authentication failed","message":"Client authentication failed"} , why?

[@kisong9744]

What are some ways to guard the routes on the client app with the access token provided by the oauth server?

[@phucduong8985]

why route /callback can not get value of session('state')? help me

[@neyneng4444]

Having the same problem. Have you fixed this? thanks

[@phihoang3812]

You need to config different APP_NAME on server and client in .env config file

[@cerori28th]

@@phihoang3812 thanks

[@chawkimahdi593]

@@phihoang3812 omg bro i can't believe that i waste two days on this stupid bug, thank u so much

[@bakugansoj9204]

What means? @phihoang3812

[@wilfreedi]

Thank. What to do next? How can I save the received data to a session to use in a project?

[@myPHPnotes]

Part 3 will be coming in 8 hours. Stay tuned.

[@wilfreedi]

@@myPHPnotes Thanks, I'm waiting

[@mrcocl1707]

Dear sir, login callback is gooood. How to create register callback?

[@JamiulBari]

What to do if we want to authorize first-party app? Since we don't need confirmation for first-party app

[@balamurugannatarajan7008]

bro can you tell the version of laravel you are using on

[@billeibinabo]

How do I redirect to the login page when the session expires.

[@leonardoaldino]

this is oauth not sso right ? SSO is when we login first client app, second and third app is login too

[@dimensikini]

Hi, how can I skip/disable the Authorization Request prompt?

[@myPHPnotes]

Aaah... it is the standard for OAuth2.0 for setting scopes and providing the access token on that behalf. You can tweak with the passport code to bypass it but it is not recommended.

[@dimensikini]

@@myPHPnotes It seems that I need to authorize the app each time I login instead of one the first time login.

[@kenkaneki1475]

gettin this error: {"error":"unsupported_grant_type","error_description":"The authorization grant type is not supported by the authorization server.","hint":"Check that all required parameters have been provided","message":"The authorization grant type is not supported by the authorization server."}

[@diegomisaelr.3182]

Me too. I'm searching why

[@francisndri6775]

Me too 😩

[@FranckGrenier]

Hello, any update on this "unsupported_grant_type" error ?

[@kenkaneki1475]

I'm sorry didn't found any solution yet

[@FranckGrenier]

Ok, I figured it out. My GET request to "/oauth/authorize" did not contain the right "client_id" param. So the OAuth server was not able to get the right client. Also, the "redirect URL" stored in the "oauth_clients" table should match the one you send in the parameters.

[@JNET_Reloaded]

why laravel crap why ppl using libraries just do it raw php is the best then it works everywhere!