Weave Code
Auth0 Laravel Package
socialiteproviders/auth0
Auth0 provider for Laravel Socialite, adding Auth0 OAuth login to socialiteproviders so Laravel apps can authenticate users through Auth0 with a familiar Socialite driver and configuration.
[READ ONLY] Subtree split of the SocialiteProviders/Auth0 Provider (see SocialiteProviders/Providers)
Frequently asked questions about Auth0
- How do I install the Auth0 provider for Laravel Socialite?
- Install the driver with Composer by requiring socialiteproviders/auth0 alongside laravel/socialite. The package is a Socialite driver, so it does not replace Socialite itself; you need both. Composer will resolve the compatible Socialite version for your Laravel release.
- How do I register the Auth0 Socialite provider in Laravel?
- You register the provider by listening for Socialite's SocialiteWasCalled event and calling extend with the auth0 driver name. This is normally done in a service provider such as AppServiceProvider or a dedicated listener. Once registered, you can call Socialite::driver('auth0') in your controller exactly like any built-in driver.
- What credentials and configuration does the Auth0 driver need?
- You need an Auth0 application's client ID, client secret, and a callback URL, plus your Auth0 domain or base URL so the driver can build the authorization and token endpoints. These values typically go in config/services.php under a services.auth0 entry, usually sourced from environment variables. Make sure the callback URL configured in Laravel matches the one registered in the Auth0 dashboard exactly.
- Does this package support Auth0 OIDC configuration?
- Yes, the driver supports Auth0's OpenID Connect setup, which is what underpins Auth0 universal login. Because Auth0 endpoints are tenant-specific, the driver relies on your configured domain or base URL to construct the correct OIDC authorization and token URLs. If you use a custom domain in Auth0, point the configuration at that domain instead of the default tenant URL.
- Which Laravel and Socialite versions are supported?
- The package is built for the Socialite provider ecosystem maintained under socialiteproviders, so it targets currently supported Laravel and Socialite major versions. Because support changes over time, check the package's composer.json constraints on Packagist before upgrading Laravel or Socialite. Pinning the driver version in composer.json avoids surprises when you upgrade the framework.
- How is the Auth0 driver different from Laravel's built-in Socialite drivers?
- Functionally it is the same pattern: you get a redirect method, a user method, and standard Socialite user objects with id, name, email, and token data. The difference is that authentication happens through Auth0's hosted universal login page rather than directly against an identity provider. That lets you enable multiple identity providers, MFA, and Auth0 rules behind a single Laravel integration.
- How do I retrieve user details such as email and name after login?
- Call Socialite::driver('auth0')->user() in your callback route and read the returned user object's id, name, email, and nickname properties. The id value comes from Auth0's user identifier, so store it as the stable key for matching local accounts. You can also call getRaw() on the user to inspect the full OIDC claims payload.
- How do I test Auth0 login locally or in automated tests?
- For local development, register a localhost callback URL in your Auth0 application settings and keep the credentials in .env. In automated tests, avoid hitting Auth0 by faking or mocking the Socialite driver so your callback logic is exercised without a real OAuth round trip. Auth0 also offers test social connections if you want an end-to-end check against a sandbox identity provider.
- What should I watch out for in production when using Auth0 with Socialite?
- Always serve the app and callback over HTTPS, keep the client secret out of version control, and make sure sessions are configured so Socialite's state validation works correctly behind load balancers. If you use multiple app instances, use a shared session store so the OAuth state survives the redirect back. Also verify that Auth0's allowed callback and logout URLs are updated for every environment.
- Is this package actively maintained, and what are the alternatives?
- The Auth0 driver is part of the socialiteproviders organisation, which maintains a large set of community Socialite drivers; for maintenance status, check the repository's recent commits and release history on Packagist. Alternatives include Auth0's official Laravel SDK, which offers more Auth0-specific features such as token validation and management API access, or a custom Socialite driver. For simple hosted-login flows, this provider keeps your existing Socialite code largely unchanged.
Weaver
How can I help you explore Laravel packages today?