Compare commits
8
Commits
1a19aee52d
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
ce72d28912 | ||
|
|
f3b226a0fd | ||
|
|
7bbf7f68e4 | ||
|
|
e663b03c0e | ||
|
|
4a718ce763 | ||
|
|
d8c8f2d1e0 | ||
|
|
883e637c46 | ||
|
|
4512da5140 |
No files matched your search
@@ -5,9 +5,31 @@
|
|||||||
[](https://github.com/alexandergabriel/filament-oauth2/actions?query=workflow%3A"Fix+PHP+code+styling"+branch%3Amain)
|
[](https://github.com/alexandergabriel/filament-oauth2/actions?query=workflow%3A"Fix+PHP+code+styling"+branch%3Amain)
|
||||||
[](https://packagist.org/packages/alexandergabriel/filament-oauth2)
|
[](https://packagist.org/packages/alexandergabriel/filament-oauth2)
|
||||||
|
|
||||||
|
> !!!
|
||||||
|
> This Plugin is still under development and only tested with Keycloak.
|
||||||
|
> This is my first FilamentPHP-Plugin.
|
||||||
|
> Did not write any tests, not published to packagist yet...
|
||||||
|
> Feedback welcome.
|
||||||
|
> !!!
|
||||||
|
|
||||||
|
To be able to install you have to add/change this to/in your composer.json:
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"minimum-stability": "dev",
|
||||||
|
"repositories": [
|
||||||
|
{
|
||||||
|
"type": "vcs",
|
||||||
|
"url": "https://github.com/AlexanderGabriel/filament-oauth2"
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
This is where your description should go. Limit it to a paragraph or two. Consider adding a small example.
|
This Plugin enables OAuth2-Login for [FilamentPHP](https://filamentphp.com) Panels.
|
||||||
|
Login and logout is done by OAuth2-Server.
|
||||||
|
If the OAuth2-Server provides roles for your client, they will be mapped to the App\Models\Role-Model
|
||||||
|
Non-existing Roles will be created.
|
||||||
|
Users will be detached to roles not in the access token any more.
|
||||||
|
|
||||||
## Installation
|
## Installation
|
||||||
|
|
||||||
@@ -17,39 +39,75 @@ You can install the package via composer:
|
|||||||
composer require alexandergabriel/filament-oauth2
|
composer require alexandergabriel/filament-oauth2
|
||||||
```
|
```
|
||||||
|
|
||||||
You can publish and run the migrations with:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
php artisan vendor:publish --tag="filament-oauth2-migrations"
|
|
||||||
php artisan migrate
|
|
||||||
```
|
|
||||||
|
|
||||||
You can publish the config file with:
|
You can publish the config file with:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
php artisan vendor:publish --tag="filament-oauth2-config"
|
php artisan vendor:publish --tag="filament-oauth2-config"
|
||||||
```
|
```
|
||||||
|
|
||||||
Optionally, you can publish the views using
|
|
||||||
|
|
||||||
```bash
|
|
||||||
php artisan vendor:publish --tag="filament-oauth2-views"
|
|
||||||
```
|
|
||||||
|
|
||||||
This is the contents of the published config file:
|
This is the contents of the published config file:
|
||||||
|
|
||||||
```php
|
```php
|
||||||
return [
|
return [
|
||||||
|
'clientId' => env("OAUTH2_CLIENT_ID"),
|
||||||
|
'clientSecret' => env("OAUTH2_CLIENT_SECRET"),
|
||||||
|
'baseUrl' => env("OAUTH2_BASE_URL"), // https://DOMAIN/realms/REALM/protocol/openid-connect
|
||||||
|
'urlAuthorize' => env("OAUTH2_URL_AUTHORIZE", env("OAUTH2_BASE_URL")."/auth"),
|
||||||
|
'urlAccessToken' => env("OAUTH2_URL_ACCESS_TOKEN", env("OAUTH2_BASE_URL")."/token"),
|
||||||
|
'urlResourceOwnerDetails' => env("OAUTH2_URL_RESOURCE_OWNER_DETAILS", env("OAUTH2_BASE_URL")."/userinfo"),
|
||||||
|
'urlLogout' => env("OAUTH2_URL_LOGOUT", env("OAUTH2_BASE_URL")."/logout"),
|
||||||
|
'urlAfterlogout' => env("OAUTH2_URL_AFTER_LOGOUT", url('/')),
|
||||||
|
'scopes' => env("OAUTH2_SCOPES", "profile email openid"),
|
||||||
|
'updateRoles' => env("OAUTH2_UPDATE_ROLES", false)
|
||||||
];
|
];
|
||||||
```
|
```
|
||||||
|
|
||||||
## Usage
|
## Usage
|
||||||
|
|
||||||
|
Load Plugin in your PanelProvider under filament-oauth2-demo/app/Providers/Filament:
|
||||||
```php
|
```php
|
||||||
$filamentOauth2 = new AlexanderGabriel\FilamentOauth2();
|
class YOURPanelProvider extends PanelProvider
|
||||||
echo $filamentOauth2->echoPhrase('Hello, AlexanderGabriel!');
|
{
|
||||||
|
public function panel(Panel $panel): Panel
|
||||||
|
{
|
||||||
|
return $panel
|
||||||
|
->plugin(
|
||||||
|
new FilamentOauth2Plugin()
|
||||||
|
)
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
### To configure, add some config to your .env:
|
||||||
|
|
||||||
|
- OAUTH2_CLIENT_ID*
|
||||||
|
- OAuth2 client id, mandatory
|
||||||
|
- OAUTH2_CLIENT_SECRET*
|
||||||
|
- OAuth2 client secret, mandatory
|
||||||
|
- OAUTH2_BASE_URL*
|
||||||
|
- Base url to OAuth2 authentication server
|
||||||
|
- must include realm: https://DOMAIN/realms/REALM/protocol/openid-connect
|
||||||
|
- OAUTH2_URL_AUTHORIZE
|
||||||
|
- authorization url
|
||||||
|
- defaults to OAUTH2_BASE_URL+/auth
|
||||||
|
- OAUTH2_URL_ACCESS_TOKEN
|
||||||
|
- token url
|
||||||
|
- defaults to OAUTH2_BASE_URL+/token
|
||||||
|
- OAUTH2_URL_RESOURCE_OWNER_DETAILS
|
||||||
|
- resource owner details url
|
||||||
|
- defaults to OAUTH2_BASE_URL+/userinfo
|
||||||
|
- todo: needed?
|
||||||
|
- OAUTH2_URL_LOGOUT
|
||||||
|
- logout url
|
||||||
|
- defaults to OAUTH2_BASE_URL+/logout
|
||||||
|
- OAUTH2_URL_AFTER_LOGOUT
|
||||||
|
- post_logout_redirect_uri
|
||||||
|
- defaults to base url of Laravel app (without panel)
|
||||||
|
- OAUTH2_SCOPES
|
||||||
|
- scopes
|
||||||
|
- defaults to "profile email openid"
|
||||||
|
- OAUTH2_UPDATE_ROLES
|
||||||
|
- look for roles in token and update/create and map them
|
||||||
|
- defaults to false
|
||||||
|
|
||||||
## Testing
|
## Testing
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
@@ -70,6 +128,7 @@ Please review [our security policy](../../security/policy) on how to report secu
|
|||||||
|
|
||||||
## Credits
|
## Credits
|
||||||
|
|
||||||
|
- To all helping developing and keeping alive FilamentPHP, PHP, OAuth2 and the OpenSource Ecosystem!
|
||||||
- [Alexander Gabriel](https://github.com/AlexanderGabriel)
|
- [Alexander Gabriel](https://github.com/AlexanderGabriel)
|
||||||
- [All Contributors](../../contributors)
|
- [All Contributors](../../contributors)
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1,78 @@
|
|||||||
|
# This is my package filament-oauth2
|
||||||
|
|
||||||
|
[](https://packagist.org/packages/alexandergabriel/filament-oauth2)
|
||||||
|
[](https://github.com/alexandergabriel/filament-oauth2/actions?query=workflow%3Arun-tests+branch%3Amain)
|
||||||
|
[](https://github.com/alexandergabriel/filament-oauth2/actions?query=workflow%3A"Fix+PHP+code+styling"+branch%3Amain)
|
||||||
|
[](https://packagist.org/packages/alexandergabriel/filament-oauth2)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
This is where your description should go. Limit it to a paragraph or two. Consider adding a small example.
|
||||||
|
|
||||||
|
## Installation
|
||||||
|
|
||||||
|
You can install the package via composer:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
composer require alexandergabriel/filament-oauth2
|
||||||
|
```
|
||||||
|
|
||||||
|
You can publish and run the migrations with:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
php artisan vendor:publish --tag="filament-oauth2-migrations"
|
||||||
|
php artisan migrate
|
||||||
|
```
|
||||||
|
|
||||||
|
You can publish the config file with:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
php artisan vendor:publish --tag="filament-oauth2-config"
|
||||||
|
```
|
||||||
|
|
||||||
|
Optionally, you can publish the views using
|
||||||
|
|
||||||
|
```bash
|
||||||
|
php artisan vendor:publish --tag="filament-oauth2-views"
|
||||||
|
```
|
||||||
|
|
||||||
|
This is the contents of the published config file:
|
||||||
|
|
||||||
|
```php
|
||||||
|
return [
|
||||||
|
];
|
||||||
|
```
|
||||||
|
|
||||||
|
## Usage
|
||||||
|
|
||||||
|
```php
|
||||||
|
$filamentOauth2 = new AlexanderGabriel\FilamentOauth2();
|
||||||
|
echo $filamentOauth2->echoPhrase('Hello, AlexanderGabriel!');
|
||||||
|
```
|
||||||
|
|
||||||
|
## Testing
|
||||||
|
|
||||||
|
```bash
|
||||||
|
composer test
|
||||||
|
```
|
||||||
|
|
||||||
|
## Changelog
|
||||||
|
|
||||||
|
Please see [CHANGELOG](CHANGELOG.md) for more information on what has changed recently.
|
||||||
|
|
||||||
|
## Contributing
|
||||||
|
|
||||||
|
Please see [CONTRIBUTING](.github/CONTRIBUTING.md) for details.
|
||||||
|
|
||||||
|
## Security Vulnerabilities
|
||||||
|
|
||||||
|
Please review [our security policy](../../security/policy) on how to report security vulnerabilities.
|
||||||
|
|
||||||
|
## Credits
|
||||||
|
|
||||||
|
- [Alexander Gabriel](https://github.com/AlexanderGabriel)
|
||||||
|
- [All Contributors](../../contributors)
|
||||||
|
|
||||||
|
## License
|
||||||
|
|
||||||
|
The MIT License (MIT). Please see [License File](LICENSE.md) for more information.
|
||||||
+2
-2
@@ -1,6 +1,6 @@
|
|||||||
{
|
{
|
||||||
"name": "alexandergabriel/filament-oauth2",
|
"name": "alexandergabriel/filament-oauth2",
|
||||||
"description": "This is my package filament-oauth2",
|
"description": "Enable OAuth2 Authentication to FilamentPHP Panels",
|
||||||
"keywords": [
|
"keywords": [
|
||||||
"AlexanderGabriel",
|
"AlexanderGabriel",
|
||||||
"laravel",
|
"laravel",
|
||||||
@@ -21,7 +21,7 @@
|
|||||||
],
|
],
|
||||||
"require": {
|
"require": {
|
||||||
"php": "^8.1",
|
"php": "^8.1",
|
||||||
"filament/filament": "^3.0",
|
"filament/filament": "^4.0",
|
||||||
"league/oauth2-client": "*",
|
"league/oauth2-client": "*",
|
||||||
"spatie/laravel-package-tools": "^1.15.0"
|
"spatie/laravel-package-tools": "^1.15.0"
|
||||||
},
|
},
|
||||||
|
|||||||
@@ -3,16 +3,14 @@
|
|||||||
// config for AlexanderGabriel/FilamentOauth2
|
// config for AlexanderGabriel/FilamentOauth2
|
||||||
|
|
||||||
return [
|
return [
|
||||||
|
|
||||||
'clientId' => env("OAUTH2_CLIENT_ID"),
|
'clientId' => env("OAUTH2_CLIENT_ID"),
|
||||||
'clientSecret' => env("OAUTH2_CLIENT_SECRET"),
|
'clientSecret' => env("OAUTH2_CLIENT_SECRET"),
|
||||||
'baseUrl' => env("OAUTH2_BASE_URL"), // https://DOMAIN/realms/REALM/protocol/openid-connect
|
'baseUrl' => env("OAUTH2_BASE_URL"), // https://DOMAIN/realms/REALM/protocol/openid-connect
|
||||||
'urlAuthorize' => env("OAUTH2_URL_AUTHORIZE", env("OAUTH2_BASE_URL")."/auth"),
|
'urlAuthorize' => env("OAUTH2_URL_AUTHORIZE", env("OAUTH2_BASE_URL")."/auth"),
|
||||||
'urlAccessToken' => env("OAUTH2_URL_ACCESS_TOKEN", env("OAUTH2_BASE_URL")."/token"),
|
'urlAccessToken' => env("OAUTH2_URL_ACCESS_TOKEN", env("OAUTH2_BASE_URL")."/token"),
|
||||||
'urlResourceOwnerDetails' => env("OAUTH2_URL_RSOURCE_OWNER_DETAILS", env("OAUTH2_BASE_URL")."/userinfo"),
|
'urlResourceOwnerDetails' => env("OAUTH2_URL_RESOURCE_OWNER_DETAILS", env("OAUTH2_BASE_URL")."/userinfo"),
|
||||||
'urlLogout' => env("OAUTH2_URL_LOGOUT", env("OAUTH2_BASE_URL")."/logout"),
|
'urlLogout' => env("OAUTH2_URL_LOGOUT", env("OAUTH2_BASE_URL")."/logout"),
|
||||||
'urlAfterlogout' => env("OAUTH2_URL_AFTER_LOGOUT", url('/')),
|
'urlAfterlogout' => env("OAUTH2_URL_AFTER_LOGOUT", url('/')),
|
||||||
'scopes' => env("OAUTH2_SCOPES", "profile email openid"),
|
'scopes' => env("OAUTH2_SCOPES", "profile email openid"),
|
||||||
'updateRoles' => env("OAUTH2_UPDATE_ROLES", false)
|
'updateRoles' => env("OAUTH2_UPDATE_ROLES", false)
|
||||||
|
|
||||||
];
|
];
|
||||||
+2
-2
@@ -6,7 +6,7 @@ use AlexanderGabriel\FilamentOauth2\Http\Controllers\Oauth2Controller;
|
|||||||
use Filament\Facades\Filament;
|
use Filament\Facades\Filament;
|
||||||
use Illuminate\Support\Facades\Route;
|
use Illuminate\Support\Facades\Route;
|
||||||
|
|
||||||
$panel = Filament::getCurrentPanel();
|
$panel = Filament::getCurrentOrDefaultPanel();
|
||||||
|
|
||||||
Route::prefix($panel->getPath())
|
Route::prefix($panel->getPath())
|
||||||
->middleware($panel->getMiddleware())
|
->middleware($panel->getMiddleware())
|
||||||
@@ -15,7 +15,7 @@ Route::prefix($panel->getPath())
|
|||||||
Route::name('filament-oauth2.')
|
Route::name('filament-oauth2.')
|
||||||
->prefix('filament-oauth2')
|
->prefix('filament-oauth2')
|
||||||
->group(function () {
|
->group(function () {
|
||||||
Route::post('handleLogout', [Oauth2Controller::class, 'handleLogout'])->name('handleLogout');
|
Route::get('handleLogout', [Oauth2Controller::class, 'handleLogout'])->name('handleLogout');
|
||||||
Route::get('redirectToOauth2Server', [Oauth2Controller::class, 'redirectToOauth2Server'])
|
Route::get('redirectToOauth2Server', [Oauth2Controller::class, 'redirectToOauth2Server'])
|
||||||
->name('redirectToOauth2Server');
|
->name('redirectToOauth2Server');
|
||||||
Route::get('handleCallback', [Oauth2Controller::class, 'handleCallback'])
|
Route::get('handleCallback', [Oauth2Controller::class, 'handleCallback'])
|
||||||
|
|||||||
@@ -51,15 +51,6 @@ class FilamentOauth2ServiceProvider extends PackageServiceProvider
|
|||||||
|
|
||||||
public function packageBooted(): void
|
public function packageBooted(): void
|
||||||
{
|
{
|
||||||
// Handle Stubs
|
|
||||||
if (app()->runningInConsole()) {
|
|
||||||
foreach (app(Filesystem::class)->files(__DIR__ . '/../stubs/') as $file) {
|
|
||||||
$this->publishes([
|
|
||||||
$file->getRealPath() => base_path("stubs/filament-oauth2/{$file->getFilename()}"),
|
|
||||||
], 'filament-oauth2-stubs');
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
// Testing
|
// Testing
|
||||||
Testable::mixin(new TestsFilamentOauth2);
|
Testable::mixin(new TestsFilamentOauth2);
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -7,8 +7,8 @@ use App\Models\Role;
|
|||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use Illuminate\Validation\ValidationException;
|
use Illuminate\Validation\ValidationException;
|
||||||
use Exception;
|
use Exception;
|
||||||
|
use Filament\Auth\Http\Responses\LoginResponse;
|
||||||
use Filament\Facades\Filament;
|
use Filament\Facades\Filament;
|
||||||
use Filament\Http\Responses\Auth\LoginResponse;
|
|
||||||
use Filament\Models\Contracts\FilamentUser;
|
use Filament\Models\Contracts\FilamentUser;
|
||||||
use Illuminate\Database\Eloquent\Model;
|
use Illuminate\Database\Eloquent\Model;
|
||||||
use Illuminate\Http\Request;
|
use Illuminate\Http\Request;
|
||||||
|
|||||||
Whitespace-only changes.
Reference in new issue
Block a user