问OAuth 2.0与自定义API集成概述(用Laravel编写)

EN

<?php

class AuthController extends BaseController {

    //@see http://www.mrcasual.com/on/coding/laravel4-package-management-with-composer/
    public function getSocial($action = '')
    {
        // check URL segment
        if ($action == 'auth') {
            // process authentication
            try {
                Hybrid_Endpoint::process();
            }
            catch (Exception $e) {
                // redirect back to http://URL/social/
                return Redirect::to('login/social');
            }
            return;
        }
        try {
            // create a HybridAuth object
            $socialAuth = new Hybrid_Auth(app_path() . '/config/hybridauth.php');
            // authenticate with provider
            if($action != ''){
                // only allow facebook and google
                if(in_array($action,array('google','facebook'))){
                    $provider = $socialAuth->authenticate($action);
                }else{
                    // catch this form_error in the login form
                    return Redirect::to('login')->withErrors(array('form_errors'=>'The url was invalid'));
                }
            }else{
                return Redirect::to('login');
            }
            // fetch user profile
            $userProfile = $provider->getUserProfile();
        }
        catch(Exception $e) {
            // exception codes can be found on HybBridAuth's web site
            return Redirect::to('login')->withErrors(array('form_errors'=>'Error on Login: #'.$e->getCode().': '.$e->getMessage()));
        }
        /*access user profile data
        echo "Connected with: <b>{$provider->id}</b><br />";
        echo "As: <b>{$userProfile->displayName}</b><br />";
        echo "<pre>" . print_r( $userProfile, true ) . "</pre><br />";
        die();*/


        //check if User exists
        if($user_id = DB::table('authentications')->where('provider', $provider->id)->where('provider_uid',$userProfile->identifier)->pluck('user_id')){
            //login user
            Auth::loginUsingId($user_id);
            //update user details (eg photo, name, etc)
            //Here you can update the user details
            return Redirect::to('dashboard');
        }else{
            //lets see if we already know this email -> connect it with the registered account
            if($user = User::where('email',$userProfile->email)->first()){
                $user->authentications()->save(new Authentication(array('provider'=>$provider->id, 'provider_uid'=>$userProfile->identifier)));
                Auth::login($user);
                //here you can update the user details 
                return Redirect::to('dashboard')->with('user_social_linked',$provider->id);
            }else{
                //register user
                $user = $this->createUser(array('email'=>$userProfile->email,'password'=>''));
                $user->authentications()->save(new Authentication(array('provider'=>$provider->id, 'provider_uid'=>$userProfile->identifier)));
                Auth::login($user);
                //here you can set/update the user details 
                return Redirect::to('dashboard')->with('user_created',true);
            }
        }
    }

    private function createUser($credentials)
    {
        $user = new User();
        $user->email = $credentials['email'];
        $user->password = $credentials['password'];
        $user->save();
        Auth::login($user);
        return $user;
    }
}

<?php
public function setPasswordAttribute($password){
    //disable blank passwords => disables account login (eg login only with third party aka social providers)
    if($password != ''){
        $this->attributes['password'] = Hash::make($password);
    }else{
        $this->attributes['password'] = $password;
    }
}