a620906209/CFDivePlatform
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(auth): 補 StartSession middleware 給 OAuth routes

Browse Source 
api.php 的 route 預設無 session middleware，
移除 stateless() 後 session() 呼叫直接 500。
只對 /auth/google/* 兩個 route 加 StartSession，不影響其他 API endpoint。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Hank
2026-06-03 01:44:29 +08:00
parent 2a0e9255ae
commit 3b90edf843
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
routes/api.php
+3 -1
View File
@@ -30,9 +30,11 @@ Route::get('/diving-offers/{id}/reviews', [ReviewController::class, 'publicList
Route::post('/member/register', [AuthController::class, 'registerMember']); Route::post('/member/register', [AuthController::class, 'registerMember']);
Route::middleware('throttle:10,1')->post('/member/login', [AuthController::class, 'loginMember']); Route::middleware('throttle:10,1')->post('/member/login', [AuthController::class, 'loginMember']);
// Google 第三方登入（僅會員） // Google 第三方登入（僅會員）— 需要 StartSession 支援 OAuth state
Route::middleware([\Illuminate\Session\Middleware\StartSession::class])->group(function () {
Route::get('/auth/google/redirect', [\App\Http\Controllers\API\SocialAuthController::class, 'redirectToGoogle']); Route::get('/auth/google/redirect', [\App\Http\Controllers\API\SocialAuthController::class, 'redirectToGoogle']);
Route::get('/auth/google/callback', [\App\Http\Controllers\API\SocialAuthController::class, 'handleGoogleCallback']); Route::get('/auth/google/callback', [\App\Http\Controllers\API\SocialAuthController::class, 'handleGoogleCallback']);
});
// 會員專屬 API（需登入） // 會員專屬 API（需登入）
Route::middleware(['auth:sanctum'])->prefix('member')->group(function () { Route::middleware(['auth:sanctum'])->prefix('member')->group(function () {