Weave Code
Google Auth Bundle Laravel Package
gupalo/google-auth-bundle
A Symfony bundle that adds Google authentication to your app, handling OAuth sign-in so users can log in with their Google accounts. It wires Google's auth flow into your existing security setup with minimal configuration.
Google Auth Bundle
Frequently asked questions about Google Auth Bundle
- Can I use gupalo/google-auth-bundle in a Laravel application?
- No, not as a supported integration. It is a Symfony bundle that relies on Symfony's bundle discovery, dependency injection extension, and configuration tree, none of which Laravel's service container reads. Composer may resolve it if transitive constraints happen to fit, but it will not self-register or configure itself in Laravel. Treat it as reference material rather than a dependency.
- Does gupalo/google-auth-bundle support Laravel 10 or Laravel 11?
- There is no Laravel version support because the package is a Symfony bundle, not a Laravel package. It has no service provider, facade, or Laravel adapter, so Laravel 10 and 11 are not targeted. Its 2021 release also makes compatibility with modern PHP 8.2+ and Symfony 7 components unlikely without changes.
- How do I install gupalo/google-auth-bundle with Composer in Laravel?
- You can run composer require gupalo/google-auth-bundle, but installation only means the code lands in vendor. Laravel will not discover the bundle, register its services, or apply its configuration. Making it work would require manually recreating its services and config inside a custom service provider. That effort is not recommended when maintained Laravel alternatives exist.
- What is the best Laravel alternative to gupalo/google-auth-bundle for Google login?
- Laravel Socialite with the Google driver is the standard choice for the redirect and callback flow. If you need server-side Google ID token verification, pair Socialite with google/apiclient or firebase/php-jwt. For Google API access beyond identity, such as Calendar or Drive, use google/apiclient directly alongside Socialite.
- Is gupalo/google-auth-bundle maintained and safe for production?
- The last release was 2021-01-08, with four stars and zero dependents, so there is little user base or maintainer signal. Authentication code handles authorization codes, state, nonce, and ID token checks, which is a high-risk area to inherit unmaintained. Without a clear security patching commitment, it should not be used in production.
- How does gupalo/google-auth-bundle handle Google OAuth token exchange and ID token verification?
- The evaluation could not confirm what the bundle wraps, whether it uses google/apiclient, league/oauth2-google, or hand-rolled HTTP calls. That matters because token exchange and ID token verification are the parts most sensitive to upstream changes. Before relying on it, you would need to read the source and verify signature, audience, issuer, expiry, and nonce checks.
- Can I extract the Google OAuth logic from this Symfony bundle into a Laravel service provider?
- You could manually copy the internal OAuth handling into a Laravel service provider, but the bundle contributes little beyond that logic. The configuration tree, compiler passes, and tagged services are Symfony-specific and would not transfer. Reimplementing the flow on Laravel Socialite or league/oauth2-google is safer and less exposed to abandoned code.
- What Symfony and PHP versions does gupalo/google-auth-bundle require?
- The repository's composer.json is the authoritative source, but a bundle last released in January 2021 most likely targets Symfony 4 or 5-era APIs and PHP 7.x. Installing it in a current Laravel app with PHP 8.2+ and Symfony 7 components risks conflicts or silently stale symfony sub-dependencies. Check the constraints before considering any manual integration.
- How do I test Google OAuth login in Laravel if I do not use this bundle?
- With Laravel Socialite you can mock the driver or fake outgoing HTTP requests in tests, so tests do not hit Google. You can assert redirects, callback handling, and user creation without real credentials. This testing support is one reason Socialite is a better fit than manually wiring a Symfony bundle.
- Does gupalo/google-auth-bundle implement PKCE, state validation, and nonce checks?
- That is not established by the package metadata and must be verified in the source. Google's OAuth and OIDC guidance has moved on PKCE expectations and ID token claim validation since the 2021 release. Any authentication package without verifiable state, nonce, signature, audience, issuer, and expiry checks should be rejected for production.
Weaver
How can I help you explore Laravel packages today?