All geek questions in one place

SSO with Laravel passport

I am going to develop a complete identification system in Laravel 5 with a passport.

Following is my requirement:

  • I should have a basic identity management application, such as identity.mysite.com, where all my users are stored.
  • I have 2 more applications APP1, APP2.
  • When a user requests a limited resource on APP1, (s), he must authenticate through identity.mysite.com
  • After authentication, allow the user access to resources on APP1
  • In the meantime, if a user decides to access limited resources on APP2, (s), he should not request credentials again.

What I tried:

  • simpleSAMLphp - SAML is an option that does this for me. But it is not as mature as OneLogin , and I am not going to enter the SaaS model at this stage, if it is not required.
  • Laravel Passport - oAuth 2.0 seems tempting, I can even use the “Grant Passport Badges” , but I'm not sure how reliable SAML is. In addition, Laravel Passport is widely used for API authentication. Would it be useful for authenticating traditional session-based applications? I have not seen a single example when a proper SSO is implemented with multiple applications and a laravel passport.

, OAuth 2.0 . - "", , , , . -, Laravel?

+4
1

, , (app1, app2...) , , , ...

oauth OAuth. , , :

  • , oauth , true, .

  • , , , oAuth , .

, , , Laravel Passport . , . , .

0

Source: https://habr.com/ru/post/1671512/

More articles:


All Articles