Wrong state parameter handling

[adamwathan]

Wrong state parameter handling

[adamwathan]

Were you able to resolve this? Testing locally with the Google provider and still working here :(

[bsdnomad]

What is interesting it does the same with GitHub and LinkedIn, only Facebook works properly.
I guess it's about domain 'cloaking' or inability to access it from outside for some of the providers.

Really strange, I followed strictly the instructions you present in the video. Going to post updates if I manage to solve it.

[adamwathan]

Closing for now, if you find a way to reliably reproduce or have more information please open another issue 👍

[timkrins]

I was having this issue - I'm only just starting with Laravel.

Figured it out - it was because my authentication routes were outside of the web middleware.

...which of course, I could have found out if I just googled more... gah... Mentioned at the end of issue #32

Anyhow, setting up my routes like this fixed the problem:

Route::group(['middleware' => ['web']], function () {

    // Redirect for authorization
    Route::get('auth/linkedin', function() {
        return SocialAuth::authorize('linkedin');
    });

    // Redirects here after authorization
    Route::get('auth/linkedin/callback', function() {

        // Log in existing users or create
        SocialAuth::login('linkedin');

        // Now have user
        $user = Auth::user();

        return Redirect::intended();
    });

});

[nclaveras]

It happened the same to me, working locally. What worked for me was:
php artisan config:clear
but then it happened again later and I need to do the same but closing session in google/facebook/others, closing firefox and worked again.
It seems that detect you tried so many attempts and stops working.