Redirect using Laravel framework

[nstapelbroek]

Changes

Heya 👋, This PR will introduce backwards incompatible changes I left out in #135. Let me know what you think.

Concrete changes:

• Overwrite the Auth0 SDK login method so we can wrap the redirect in a RedirectResponse.
• Undid the workarounds in Use LaravelSessionStore in the SessionStateHandler. #135 because we preferred no BC breaks, that ship has sailed with my behaviour change.

Result is that brand new sessions that start on a /login will now work because the redirect response returned wil have set-cookie headers.

References

#135

Testing

Please describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. If this library has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

[ ] This change has been tested on the latest version Laravel

Checklist

[x] I have read the Auth0 general contribution guidelines

[x] I have read the Auth0 Code of Conduct

[joshcanhelp]

@nstapelbroek - Thanks for this! Instead of recreating all the behavior in the SDK, do you think it would be more helpful to us to add a method to the SDK that just builds out the authorization URL and hands it back? I can use the same method in the core login() one to do the redirection, then we won't break anything. I'm working on a minor release for the SDK now and can include that as part of it.

[joshcanhelp]

@nstapelbroek - Alright, I put through a PR on the PHP SDK that should help with this:

auth0/auth0-PHP#371

You get use that new \Auth0\SDK\Auth0::getLoginUrl() method in that Auth0Service::login()method to get the authorize URL exactly the same way then add the return new RedirectResponse($url); just below and you should be good to go. You should also bump auth0/auth0-php in the composer file to ^5.6.0 to make sure that method is available. Happy to put through that PR myself if you don't have enough time.

Probably best to back all the session changes out of this one and keep #135 as-is. That way we can get all this working with no backwards-incompatible changes! Feel free to provide any feedback you have on the PR linked above, otherwise we'll get that reviewed/merged/released ASAP.

Thank you once again!

[nstapelbroek]

No longer needed because we found a better way in #135