Obtain access token and refresh token without a http request

[adaojunior]

Sorry for asking a question here, but I tried elsewhere and no one could answer.

Let's say I have a mobile app in which the user can login with Facebook. If it was on the web, after the authorization I would have this: auth()->login($user); but I'm not sure how to do this with Passport.

The use does have a createToken() method, but how do I get the refresh token so I can have a reponse like this?

{
  "token_type": "Bearer",
  "expires_in": 3155673600,
  "access_token": "eyJ0eXAiOiJK...",
  "refresh_token": "LbxXGlD2s..."
}

[georgecoca]

From the client side you can request for a refresh token, read this part from documentation:
https://laravel.com/docs/5.3/passport#refreshing-tokens

[adaojunior]

Hi, @GEODeveloper thanks,

I'm not sure if it solves the problem I have. I don't want to ask the user the insert the email and password. I want them to click on login with facebook, once it is validated (on the server) the server should create an access token + refresh token and it should probably be a Password Grant Token instead of the Personal Access Token that is generated from $user->createToken().

[georgecoca]

In that case, I guess you need to use the package Laravel Socialite (https://github.com/laravel/socialite), you don't need Laravel Passport, since this package it's only if you want to have your own OAuth2 Server.

Laravel Socialite supports login with Facebook.

[adaojunior]

I know, I'm already using Socialite, take a look in the code bellow:

    public function authWithFacebook(Socialite $socialite)
    {
        $fields = [...];

        $account = $socialite->driver('facebook')
            ->fields($fields)
            ->userFromToken(request()->get('access_token'));

        $user = $this->users->findByEmail($account->getEmail());
        $isNew =  empty($user);

        if($isNew) {
            $user = $this->users->registerFromFacebook($account);
        }


       /// This is the missing part
       return [
           "token_type" => "Bearer",
           "expires_in" => ...
           "access_token" => ...
           "refresh_token" => ...
       ]
    }

[georgecoca]

See this: https://github.com/laravel/socialite#retrieving-user-details

So you could get that information like this:

$user = Socialite::driver('facebook')->user();

// OAuth Two Providers
$token = $user->token;
$refreshToken = $user->refreshToken; // not always provided
$expiresIn = $user->expiresIn;

// OAuth One Providers
$token = $user->token;
$tokenSecret = $user->tokenSecret;

// All Providers
$user->getId();
$user->getNickname();
$user->getName();
$user->getEmail();
$user->getAvatar();

[adaojunior]

@GEODeveloper I want a token from my oauth(my server) not facebook's token.

1 - validate facebook's access_token
2 - obtain facebook user info
3 - check if user already exist, otherwise create a new user.
4 - return a access token + refresh token for this user to access my api

[georgecoca]

Then you just need to call /oauth/token on your server to get the access token and refresh token.

[mikemclin]

@adaojunior I'm looking at the same issue. I'm thinking a custom Grant needs to be created (SocialiteGrant). If you take a look at the Laravel\Passport\Bridge\PersonalAccessGrant, you can see how a grant is implemented. You would then need to enable the custom grant by adding it to the Laravel\Passport\PassportServiceProvider file. Of course, you can't edit the original, so, you can create a new provider that extends that one. Then make sure to reference the new provider instead of Laravel\Passport\PassportServiceProvider in your bootstrap.

I'm going to give it a go right now. I'll post back if I get something working.

[adaojunior]

@mikemclin thanks, that's seems like the best solution right now. let me know if you're able to implement that.

[mikemclin]

@adaojunior OK, I got it working. Half-way through I realized that limiting it to Socialite narrowed the scope. So, I made a CustomRequestGrant.

How it works... You make a call to /oauth/token just like you always would to get your token. But do so with a grant_type of custom_request. You'll need to add a byPassportCustomRequest($request) method to your User model (or whatever model you have configured to work with Passport). That method will accept a Illuminate\Http\Request and return the user model if you are able to authenticate the user via the request, or it will return null.

If a user object is returned, the request goes through and an access token and refresh token are returned. Otherwise they get an auth error response.

I need to clean it up a bit, and then I'll share...

[adaojunior]

@mikemclin are you actually making a http request ? I wonder if it is possible to simulate a http request just like it is done here https://github.com/laravel/passport/blob/master/src/PersonalAccessTokenFactory.php#L71

[mikemclin]

No, when I say new request, I am talking about transforming the existing request into a request for the oauth package, just like the example you showed. So, when I say new request, I'm referring to a new request object, not a new HTTP request.

[adaojunior]

ok, it would be nice if this would be built in into library. Maybe they will, because it is very useful and I is probably a very common use.

[mikemclin]

OK, here is the package. Pretty simple. Add the provider and then add the method to your User model. https://github.com/mikemclin/passport-custom-request-grant

[adrian-martinez]

@mikemclin I downloaded the package but I'm getting a "Class hash does not exist" error. Here's the stack trace:
ReflectionException in Container.php line 734: Class hash does not exist in Container.php line 734 at ReflectionClass->__construct('hash') in Container.php line 734 at Container->build('hash', array()) in Container.php line 629 at Container->make('hash', array()) in Application.php line 710 at Application->make('Illuminate\Contracts\Hashing\Hasher') in Container.php line 849 at Container->resolveClass(object(ReflectionParameter)) in Container.php line 804 at Container->getDependencies(array(object(ReflectionParameter)), array()) in Container.php line 775 at Container->build('Laravel\Passport\Bridge\UserRepository', array()) in Container.php line 629 at Container->make('Laravel\Passport\Bridge\UserRepository', array()) in Application.php line 710 at Application->make('Laravel\Passport\Bridge\UserRepository') in PassportServiceProvider.php line 138 at PassportServiceProvider->makePasswordGrant() in PassportServiceProvider.php line 80 at PassportServiceProvider->Laravel\Passport\{closure}(object(AuthorizationServer)) in helpers.php line 814 at tap(object(AuthorizationServer), object(Closure)) in PassportServiceProvider.php line 86 at PassportServiceProvider->Laravel\Passport\{closure}(object(Application), array()) in Container.php line 731 at Container->build(object(Closure), array()) in Container.php line 629 at Container->make('League\OAuth2\Server\AuthorizationServer', array()) in Application.php line 710 at Application->make('League\OAuth2\Server\AuthorizationServer', array()) in helpers.php line 106 at app('League\OAuth2\Server\AuthorizationServer') in CustomRequestGrantProvider.php line 35 at CustomRequestGrantProvider->register() in Application.php line 566 at Application->register(object(CustomRequestGrantProvider)) in ProviderRepository.php line 74 at ProviderRepository->load(array('Illuminate\Auth\AuthServiceProvider', 'Illuminate\Broadcasting\BroadcastServiceProvider', 'Illuminate\Bus\BusServiceProvider', 'Illuminate\Cache\CacheServiceProvider', 'Illuminate\Foundation\Providers\ConsoleSupportServiceProvider', 'Illuminate\Cookie\CookieServiceProvider', 'Illuminate\Database\DatabaseServiceProvider', 'Illuminate\Encryption\EncryptionServiceProvider', 'Illuminate\Filesystem\FilesystemServiceProvider', 'Illuminate\Foundation\Providers\FoundationServiceProvider', 'Illuminate\Hashing\HashServiceProvider', 'Illuminate\Mail\MailServiceProvider', 'Illuminate\Notifications\NotificationServiceProvider', 'Illuminate\Pagination\PaginationServiceProvider', 'Illuminate\Pipeline\PipelineServiceProvider', 'Illuminate\Queue\QueueServiceProvider', 'Illuminate\Redis\RedisServiceProvider', 'Illuminate\Auth\Passwords\PasswordResetServiceProvider', 'Illuminate\Session\SessionServiceProvider', 'Illuminate\Translation\TranslationServiceProvider', 'Illuminate\Validation\ValidationServiceProvider', 'Illuminate\View\ViewServiceProvider', 'Laravel\Passport\PassportServiceProvider', 'MikeMcLin\Passport\CustomRequestGrantProvider', 'LogSalud\Providers\AppServiceProvider', 'LogSalud\Providers\AuthServiceProvider', 'LogSalud\Providers\EventServiceProvider', 'LogSalud\Providers\RouteServiceProvider')) in Application.php line 541 at Application->registerConfiguredProviders() in RegisterProviders.php line 17 at RegisterProviders->bootstrap(object(Application)) in Application.php line 203 at Application->bootstrapWith(array('Illuminate\Foundation\Bootstrap\DetectEnvironment', 'Illuminate\Foundation\Bootstrap\LoadConfiguration', 'Illuminate\Foundation\Bootstrap\ConfigureLogging', 'Illuminate\Foundation\Bootstrap\HandleExceptions', 'Illuminate\Foundation\Bootstrap\RegisterFacades', 'Illuminate\Foundation\Bootstrap\RegisterProviders', 'Illuminate\Foundation\Bootstrap\BootProviders')) in Kernel.php line 253 at Kernel->bootstrap() in Kernel.php line 144 at Kernel->sendRequestThroughRouter(object(Request)) in Kernel.php line 116 at Kernel->handle(object(Request)) in index.php line 54