socialiteproviders/steam

Steam OpenID Provider for Laravel Socialite

Steam

composer require socialiteproviders/steam

Installation & Basic Usage

Please see the Base Installation Guide, then follow the provider specific instructions below., _(*1)

Add configuration to config/services.php

'steam' => [
  'client_id' => null,
  'client_secret' => env('STEAM_CLIENT_SECRET'),
  'redirect' => env('STEAM_REDIRECT_URI'),
  'allowed_hosts' => [
    'example.com',
  ]
],

allowed_hosts

Set this for protect against authorization domain spoofing. When the user returns from the Steam login page, along with the OpenID validation, the return_to parameter will be checked against the available domains in allowed_hosts., _(*2)

If you don't specify the setting, then fraudsters have the opportunity to enter the application under other users, _(*3)

Issue resolved in https://github.com/SocialiteProviders/Providers/pull/817, _(*4)

By default this protection is disabled. It will only be active when allowed hosts is not equal to an empty array., _(*5)

force_https

Set this property to force HTTPS scheme when redirecting from Steam OAuth., _(*6)

If you do not set it, the scheme will be inferred from your server settings., _(*7)

'steam' => [
  'client_id' => null,
  'client_secret' => env('STEAM_CLIENT_SECRET'),
  'redirect' => env('STEAM_REDIRECT_URI'),
  'force_https' => true,  // This will force HTTPS scheme
  'allowed_hosts' => [
    'example.com',
  ]
],

Add provider event listener

Configure the package's listener to listen for SocialiteWasCalled events., _(*8)

Add the event to your listen[] array in app/Providers/EventServiceProvider. See the Base Installation Guide for detailed instructions., _(*9)

protected $listen = [
    \SocialiteProviders\Manager\SocialiteWasCalled::class => [
        // ... other providers
        \SocialiteProviders\Steam\SteamExtendSocialite::class.'@handle',
    ],
];

Usage

You should now be able to use the provider like you would regularly use Socialite (assuming you have the facade installed):, _(*10)

return Socialite::driver('steam')->redirect();

Returned User fields

• id
• nickname
• name
• avatar