a620906209/CFDivePlatform
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(auth): 補 StartSession middleware 給 OAuth routes #24

Merged
a620906209 merged 1 commits from security/auth-p2-lockout-oauth-state into master 2026-06-02 17:47:58 +00:00
Conversation 0 Commits 1 Files Changed 1
+5 -3
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
routes/api.php
+3 -1
View File
@@ -30,9 +30,11 @@ Route::get('/diving-offers/{id}/reviews', [ReviewController::class, 'publicList
Route::post('/member/register', [AuthController::class, 'registerMember']); Route::post('/member/register', [AuthController::class, 'registerMember']);
Route::middleware('throttle:10,1')->post('/member/login', [AuthController::class, 'loginMember']); Route::middleware('throttle:10,1')->post('/member/login', [AuthController::class, 'loginMember']);
// Google 第三方登入（僅會員） // Google 第三方登入（僅會員）— 需要 StartSession 支援 OAuth state
Route::middleware([\Illuminate\Session\Middleware\StartSession::class])->group(function () {
Route::get('/auth/google/redirect', [\App\Http\Controllers\API\SocialAuthController::class, 'redirectToGoogle']); Route::get('/auth/google/redirect', [\App\Http\Controllers\API\SocialAuthController::class, 'redirectToGoogle']);
Route::get('/auth/google/callback', [\App\Http\Controllers\API\SocialAuthController::class, 'handleGoogleCallback']); Route::get('/auth/google/callback', [\App\Http\Controllers\API\SocialAuthController::class, 'handleGoogleCallback']);
});
// 會員專屬 API（需登入） // 會員專屬 API（需登入）
Route::middleware(['auth:sanctum'])->prefix('member')->group(function () { Route::middleware(['auth:sanctum'])->prefix('member')->group(function () {