Why does the Twitter Socialite Provider hate me?

If you are using Safari or Chrome, the pre-fetch/pre-render can cause a duplicate request to be sent in the background. You can get a race condition where the tokens for the pre-fetched request are the ones stored in the session causing the mis-match. Hope this helps!

My solution: https://www.victorangelier.com/laravel51-laravel-5-1-socialite-twitter/ It's a very dirty solution but it does work!

@digitalhuman Your blog post is useless, line numbers aren't static in between versions, and besides you say prepend, prepend with?

You could try to use the SocialiteProviders/Twitter Provider which I just pushed. I've used it for quite some time locally/private and never had any issues with it even though they are almost the same code wise.

Installation Instructions can be found here http://socialiteproviders.github.io/providers/twitter/.

Route::get('redirect', function () {
    return Socialite::driver('twitter')->redirect();
});

Route::get('connect', function () {
    $user = Socialite::driver('twitter')->user();

    dump($user);
});

Hi guys,

Because we can not extend the Twitter Provider Socialite and just apply stateless and cookie? The cookie generates a security issue? I managed to solve the TwitterProvider the problem as follows Socialite:

1. First solution: I directly changed the /vendor/laravel/socialite/src/One/AbstractProvider.php file and let as follows:

<?php

namespace Laravel\Socialite\One;

use Illuminate\Http\Request;
use InvalidArgumentException;
use League\OAuth1\Client\Server\Server;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Laravel\Socialite\Contracts\Provider as ProviderContract;

abstract class AbstractProvider implements ProviderContract
{

  // ... above have other methods

    /**
     * Redirect the user to the authentication page for the provider.
     *
     * @editedBy Felipe Marques <contato@felipemarques.com.br>
     * @return RedirectResponse
     */
    public function redirect()
    {
        if (!$this->isStateless()) {
            $this->request->getSession()->set(
                'oauth.temp', $temp = $this->server->getTemporaryCredentials()
            );
        } else {
            $temp = $this->server->getTemporaryCredentials();
            setcookie('oauth_temp',serialize($temp));

        }

        return new RedirectResponse($this->server->getAuthorizationUrl($temp));
    }

    /**
     * Get the User instance for the authenticated user.
     *
     * @return \Laravel\Socialite\One\User
     */
    public function user()
    {
        if (! $this->hasNecessaryVerifier()) {
            throw new InvalidArgumentException('Invalid request. Missing OAuth verifier.');
        }

        $user = $this->server->getUserDetails($token = $this->getToken());

        $instance = (new User)->setRaw($user->extra)
                ->setToken($token->getIdentifier(), $token->getSecret());

        return $instance->map([
            'id' => $user->uid, 'nickname' => $user->nickname,
            'name' => $user->name, 'email' => $user->email, 'avatar' => $user->imageUrl,
        ]);
    }

    /**
     * Get the token credentials for the request.
     *
     * @editedBy Felipe Marques <contato@felipemarques.com.br>
     * @return \League\OAuth1\Client\Credentials\TokenCredentials
     */
    protected function getToken()
    {
        if (!$this->isStateless()) {
            $temp = $this->request->getSession()->get('oauth.temp');

            return $this->server->getTokenCredentials(
                $temp, $this->request->get('oauth_token'), $this->request->get('oauth_verifier')
            );
        } else {

            $temp = unserialize($_COOKIE['oauth_temp']);

            return $this->server->getTokenCredentials(
                $temp, $this->request->get('oauth_token'), $this->request->get('oauth_verifier')
            );

        }
    }

    /**
     * Determine if the request has the necessary OAuth verifier.
     *
     * @return bool
     */
    protected function hasNecessaryVerifier()
    {
        return $this->request->has('oauth_token') && $this->request->has('oauth_verifier');
    }

    /**
     * Set the request instance.
     *
     * @param  Request  $request
     * @return $this
     */
    public function setRequest(Request $request)
    {
        $this->request = $request;

        return $this;
    }

    /**
     * Indicates if the session state should be utilized.
     *
     * @editedBy Felipe Marques <contato@felipemarques.com.br>
     * @var bool
     */
    protected $stateless = false;

    /**
     * Determine if the provider is operating as stateless.
     *
     * @editedBy Felipe Marques <contato@felipemarques.com.br>
     * @return bool
     */
    protected function isStateless()
    {
        return $this->stateless;
    }

    /**
     * Indicates that the provider should operate as stateless.
     *
     * @editedBy Felipe Marques <contato@felipemarques.com.br>
     * @return $this
     */
    public function stateless()
    {
        $this->stateless = true;

        return $this;
    }
}

?>

2. Second solution: try to extend the socialite... comming son.

@nolros Looking at the Socialite repository, there’s a Twitter provider. You seem to have a lot of code that I wouldn’t expect in a Socialite implementation. How you tried something like the following?

class AuthController extends Controller
{
    public function getRedirect()
    {
        return Socialite::driver('twitter')->redirect();
    }

    public function getCallback()
    {
        $user = Socialite::driver('twitter')->user();
    }
}

It hates me too :P

I've submitted this PR so you can now do this:

$user = Socialite::driver($provider)->userFromTokenAndSecret($oauth_token, $oauth_token_secret);

Hello!

After all i was using the cilent id instead of the api key! That was my problem, hope this helps someone!

Hello All! I think most of us this issue resolved . But anyone test twitter or facebook login in older versions of IE in windows vista or 7 ? When i try with facebook or twitter login in windows 7 with IE11 getting NULL value from One/AbstractProvider.php -> getToken() -> $temp = $this->request->session()->get('oauth.temp') Not get value from "oauth.temp". On upper version of IE , all version of firefox and chrome working fine and get value in "oauth.temp". Please help.