OAuth2 authentication provider in Neos - is there a stable base to extend?

sorenmalling · April 17, 2017, 10:24am

I used the package

as base for a generic Oauth authentification that looks like this

gist.github.com

https://gist.github.com/sorenmalling/c63f5e80830c3b19e9b65e7bf9cf5c88

AbstractOauthProvider.php

<?php

namespace Vendor\Application\Security\Authentication\Oauth\Provider;

abstract class AbstractOauthProvider extends AbstractProvider {

	/**
	 * Oauth manager
	 *
	 * @var OauthManager

This file has been truncated. show original

FacebookProvider.php

<?php

namespace Vendor\Application\Security\Authentication\Oauth\Provider;

use League\OAuth2\Client\Provider\FacebookUser;

class FacebookProvider extends AbstractOauthProvider {

	/**
	 * @return array

This file has been truncated. show original

Token.php

<?php

namespace Vendor\Application\Security\Authentication\Token;


class FacebookToken extends AbstractToken {

	/**
	 * Oauth manager
	 *

This file has been truncated. show original

I relies on the implementation of the PHP Leaguge packages, but gives me the chance of creating new OAuth authentication provider by passing a array to the authentication providers configuration given the keys that the PHP League requires to do “the talking”.

          'FacebookProvider':
            provider: Vendor\Application\Security\Authentication\Oauth\Provider\FacebookProvider
            providerOptions:
              implementationClassName: League\OAuth2\Client\Provider\Facebook
              implementationClassOptions:
                clientId: 'CLIENT_ID'
                clientSecret: 'SECRET_KEY'
                graphApiVersion: 'v2.8'
          'LinkedinProvider':
            provider: Vendor\Application\Security\Authentication\Oauth\Provider\LinkedinProvider
            providerOptions:
              implementationClassName: League\OAuth2\Client\Provider\Linkedin
              implementationClassOptions:
                clientId: 'CLIENT_ID'
                clientSecret: 'SECRET_LEY'

and as you can see, the FacebookProvider class doesn’t do anything else than pass a token class and a name of the object managing response from the specific provider.

I hope that it can help you or others