- How do I install cartalyst/sentinel-social in a Laravel application?
- Install it with Composer, for example composer require cartalyst/sentinel-social. You also need Cartalyst Sentinel installed and configured because Sentinel Social relies on Sentinel for user persistence, roles, and permissions. After installation, publish or configure the package settings and add OAuth credentials for the providers you want to enable.
- Does cartalyst/sentinel-social support Laravel 11 or Laravel 12?
- The v6.1.1 release note does not state supported Laravel or PHP versions. Check the package's composer.json constraints and the repository documentation before adopting it on Laravel 11 or 12. If your framework version is outside those constraints, test the OAuth flow in a branch before using it in production.
- What is the difference between cartalyst/sentinel-social and Laravel Socialite?
- Laravel Socialite is Laravel's official OAuth social login package and handles provider redirects and user retrieval. Cartalyst Sentinel Social is built for applications using Cartalyst Sentinel and connects social logins to Sentinel's user persistence, roles, and permissions. Choose Sentinel Social if Sentinel is already your auth and user management layer; otherwise Socialite may require you to wire persistence yourself.
- Do I need Cartalyst Sentinel installed to use sentinel-social?
- Yes. The package provides social network logins for Sentinel, so Sentinel must be installed and configured as the underlying user and permission system. Sentinel Social handles the OAuth flow and then lets Sentinel create or authenticate the user. Without Sentinel, the package's user persistence and roles integration would not work.
- How do I add a custom OAuth provider to Cartalyst Sentinel Social?
- The package description says it supports OAuth and OAuth2 including custom services, so you can register a provider beyond Facebook, Google, and Twitter. You will typically define the provider's OAuth endpoints, client credentials, and user-mapping logic according to the package's configuration. Check the repository README for the exact custom service API before implementing.
- How do I configure Facebook login with Cartalyst Sentinel Social?
- Create a Facebook OAuth app to get a client ID and secret, then add those credentials to the Sentinel Social configuration for the Facebook provider. The package depends on league/oauth2-facebook, which handles the Facebook OAuth2 flow. Ensure your callback URL matches the one registered in the Facebook app and test the redirect and user creation flow in staging.
- Is cartalyst/sentinel-social v6.1.1 safe to upgrade in production?
- The v6.1.1 change is limited to development dependencies, replacing a forked league/oauth2-facebook with the upstream package. No production dependencies, service providers, config keys, or public APIs are reported as changed. Production runtime should be unaffected, but run your test suite and OAuth integration tests in a branch before deploying.
- How should I test social login in a Laravel app using Sentinel Social?
- Mock the OAuth provider responses or use test credentials so your tests do not call real social networks. Cover the callback flow, user creation or lookup, and Sentinel role and permission assignment. If you upgraded to v6.1.1, also re-run CI because the dev dependency now resolves the upstream league/oauth2-facebook instead of a fork.
- What Laravel and PHP versions does cartalyst/sentinel-social 6.1.1 support?
- The release note for v6.1.1 does not disclose supported Laravel or PHP ranges. Confirm the constraints in the package's composer.json against your application's PHP and Laravel versions. This is especially important for older applications still on legacy Laravel releases.
- Is cartalyst/sentinel-social still maintained and what are the alternatives?
- The v6.1.1 release shows dependency maintenance by swapping a forked Facebook OAuth package for the upstream version. Check the repository's release history and issue activity for current cadence and backward-compatibility policy. Alternatives include Laravel Socialite for general OAuth logins or building a custom Sentinel integration on top of League OAuth2 clients.