Documentation: https://hypervel.org/docs/socialite
- OAuth 1.0 and the legacy
twitterdrivers are not supported. Use the OAuth 2.0xdriver, configured underservices.x; Laravel'sservices.x-oauth-2fallback is not read. - The facade is
Hypervel\Socialite\Socialite. Laravel'sFacades\Socialitealias class is not included. - Provider instances are cached for the worker lifetime, so each request's provider state lives in coroutine context: the request,
with()parameters, scopes, PKCE and stateless flags, the redirect URL, andsetConfig()overrides. Custom providers read this state through getters such asgetRequest(),getParameters(),getScopes(),getClientId(),getClientSecret(),getRedirectUrl(), andgetConfig()instead of Laravel's properties, and there are no$request,$httpClient, or$userproperties. See dynamic provider configuration. - Custom OAuth 2.0 providers are built with
buildOAuth2Provider()instead ofbuildProvider(). They may also use token-response parsers and the generic OpenID Connect base provider. See custom providers. The OAuth 1-onlyformatConfig()method is not included. - OpenID Connect providers may trust additional audiences through
trusted_audienceswhile still requiring the configured client ID. - Invalid ID-token issuers, audiences, and nonces throw
InvalidIssuerException,InvalidAudienceException, andInvalidNonceExceptionfromHypervel\Socialite\Two\Exceptionsinstead of Laravel's generic exceptions. - Google users' raw data does not include Laravel's deprecated
id,verified_email, andlinkaliases. Readsub,email_verified, andprofileinstead. stateless()disables OAuth state validation, but thexdriver's PKCE flow and generic OpenID Connect nonce validation still require session continuity.
Ported from: https://github.com/laravel/socialite