PHP
By Josh Cunningham
This tutorial demonstrates how to add user login to a PHP application. We recommend you to Log in to follow this quickstart with examples configured for your account.
I want to integrate with my app
15 minutesI want to explore a sample app
2 minutesGet a sample configured with your account settings or check it on Github.
Configure Auth0
Get Your Application Keys
When you signed up for Auth0, a new application was created for you, or you could have created a new one.
You will need some details about that application to communicate with Auth0. You can get these details from the Application Settings section in the Auth0 dashboard.
You need the following information:
- Client ID
- Domain
Configure Callback URLs
A callback URL is a URL in your application where Auth0 redirects the user after they have authenticated.
You need to whitelist the callback URL for your app in the Allowed Callback URLs field in your Application Settings. If you do not set any callback URL, your users will see a mismatch error when they log in.
Configure PHP to Use Auth0
Add the Dependencies
To install dependencies, run the following
composer require auth0/auth0-php:"~5.0"
Configure Auth0 PHP SDK
Configure the Auth0 PHP SDK for each page that will use it.
// index.php
use Auth0\SDK\Auth0;
$auth0 = new Auth0([
'domain' => 'YOUR_DOMAIN',
'client_id' => 'YOUR_CLIENT_ID',
'client_secret' => 'YOUR_CLIENT_SECRET',
'redirect_uri' => 'https://YOUR_APP/callback',
'audience' => 'https://YOUR_DOMAIN/userinfo',
'scope' => 'openid profile',
'persist_id_token' => true,
'persist_access_token' => true,
'persist_refresh_token' => true,
]);
Add the Auth0 Callback Handler
Call $auth0->getUser() to retrieve user information. If you call it from the page that handles the callback, it will use the code provided by Auth0 to get the information after the successful login.
// index.php
...
$userInfo = $auth0->getUser();
if (!$userInfo) {
// We have no user info
// redirect to Login
} else {
// User is authenticated
// Say hello to $userInfo['name']
// print logout button
}
The user's information is stored in the session. Each time you call getUser(), it retrieves the information from the session.
Trigger Authentication
<!-- index.php -->
<a class="btn btn-primary btn-lg btn-login btn-block" href="login.php">SignIn</a>
// login.php
<?php
// ...
$auth0->login();
Display User Information
You can access user information with the getUser method from Auth0.
<?php
// index.php
// ...
$userInfo = $auth0->getUser();
?>
<html>
<body class="home">
<div><?php echo $userInfo['name'] ?></div>
</body>
</html>
To learn about all the available properties from the user's profile, read the user profile documentation.
Optional: Configure session data
By default, the SDK stores user information in the PHP session and discards the access and ID Tokens.
To keep the tokens, to the SDK configuration, pass the following:
'persist_access_token' => true'persist_id_token' => true
To disable the session, pass 'store' => false to the SDK configuration.
Instead of using the PHP session to store information, you can use Laravel, Zend, Symfony or similar techniques. To do that, create a class that implements the get, set and delete methods and pass it to the SDK.
// index.php
$laravelStore = new MyLaravelStore();
$auth0 = new Auth0(array(
// ...
'store' => $laravelStore,
// ...
));