composer require guzzlehttp/guzzle guzzlehttp/psr7 http-interop/http-factory-guzzle

# ---------
# Required:
# ---------

# Your Auth0 application's Client ID
AUTH0_CLIENT_ID=YOUR_CLIENT_ID

# The URL of your Auth0 tenant domain
AUTH0_DOMAIN=YOUR_DOMAIN

# Your Auth0 application's Client Secret
AUTH0_CLIENT_SECRET=YOUR_CLIENT_SECRET

# A long, secret value used to encrypt the session cookie.
# This can be generated using `openssl rand -hex 32` from your shell.
AUTH0_COOKIE_SECRET=

# -------------------------------------------------------------------------
# Optional: Remove the leading # from the following options to enable them:
# -------------------------------------------------------------------------

# If you're using a Custom Domain, enter it here:
# AUTH0_CUSTOM_DOMAIN=

# How long the cookie session should last on the end-user device. (0 will clear when the browser window closes.)
# AUTH0_COOKIE_EXPIRES=0

# An API Identifier for testing custom APIs.
# AUTH0_AUDIENCE=

# An Organization Id for testing Organizations.
# AUTH0_ORGANIZATION=

composer require vlucas/phpdotenv

<?php

// Import the Composer Autoloader to make the SDK classes accessible:
require 'vendor/autoload.php';

// Load our environment variables from the .env file:
(Dotenv\Dotenv::createImmutable(__DIR__))->load();

// Now instantiate the Auth0 class with our configuration:
$auth0 = new \Auth0\SDK\Auth0([
    'domain' => $_ENV['AUTH0_DOMAIN'],
    'clientId' => $_ENV['AUTH0_CLIENT_ID'],
    'clientSecret' => $_ENV['AUTH0_CLIENT_SECRET'],
    'cookieSecret' => $_ENV['AUTH0_COOKIE_SECRET']
]);

composer require steampixel/simple-php-router

// 👆 We're continuing from the steps above. Append this to your index.php file.

// Import our router library:
use Steampixel\Route;

// This will respond to visits to '/', or so-called index route, where we'll display information about the user if they're logged in:
Route::add('/', 'onIndexRoute');

// This will respond to visits to '/login', where we'll prepare our users' sessions and redirect them to Auth0's Universal Login Page:
Route::add('/login', 'onLoginRoute');

// This will respond to visits to '/callback', where Auth0 will return our users after they've logged in. It's where our application can handle any session setup logic and decide where to redirect them to.
Route::add('/callback', 'onCallbackRoute');

// This will respond to visits to '/logout', where we'll clear our users' sessions and redirect them to Auth0's logout endpoint:
Route::add('/logout', 'onLogoutRoute');

// This tells our router that we've finished configuring our routes, and we're ready to begin routing incoming HTTP requests:
Route::run('/');

// 👆 We're continuing from the steps above. Append this to your index.php file.

define('ROUTE_URL_INDEX', rtrim($_ENV['AUTH0_BASE_URL'], '/'));
define('ROUTE_URL_LOGIN', ROUTE_URL_INDEX . '/login');
define('ROUTE_URL_CALLBACK', ROUTE_URL_INDEX . '/callback');
define('ROUTE_URL_LOGOUT', ROUTE_URL_INDEX . '/logout');

// 👆 We're continuing from the steps above. Append this to your index.php file.

function onIndexRoute() {
  $session = $auth0->getCredentials();

  if ($session === null) {
    // The user isn't logged in.
    echo 'Please <a href="/login">log in</a>.</p>';
    return;
  }

  // The user is logged in.
  print_r($session->user);

  echo 'You can now <a href="/logout">log out</a>.</p>';
}

// ✋ We don't need to include this in our sample application, it's just an example.
$name = $session->user['name'] ?? $session->user['nickname'] ?? $session->user['email'] ?? 'Unknown';

// 👆 We're continuing from the steps above. Append this to your index.php file.

function onLoginRoute() {
    // It's a good idea to reset user sessions each time they go to login to avoid "invalid state" errors, should they hit network issues or other problems that interrupt a previous login process:
    $auth0->clear();

    // Setup the user's session and generate a ULP URL:
    $loginUrl = $auth0->login(ROUTE_URL_CALLBACK);

    // Finally, redirect the user to the Auth0 Universal Login Page.
    header("Location: " . $loginUrl);
    exit;
}

// 👆 We're continuing from the steps above. Append this to your index.php file.

function onCallbackRoute() {
    // Have the SDK complete the authentication flow:
    $auth0->exchange(ROUTE_URL_CALLBACK);

    // Finally, redirect our end user back to the / index route, to display their user profile:
    header("Location: " . ROUTE_URL_INDEX);
    exit;
}

// 👆 We're continuing from the steps above. Append this to your index.php file.

function onLogoutRoute() {
    // Setup the user's session and generate a ULP URL:
    $logoutUrl = $auth0->logout(ROUTE_URL_INDEX);

    // Finally, redirect the user to the Auth0 Universal Login Page.
    header("Location: " . $logoutUrl);
    exit;
}