spid-laravel | SPID authentication package for Laravel

Before installing this package patching must be enabled in composer.json. This is necessary because this patch has to be applied to onelogin/php-saml for SPID compatibility.
Before installing this package patching must be enabled in composer.json. This is necessary because this patch has to be applied to onelogin/php-saml for SPID compatibility. Edit your composer.json like this: ... "extra": { "enable-patching": "true" }, ... or simply run: composer config extra.enable-patching true. Since this package is still in beta, minimum-stability option must be set to beta and the prefer-stable option must be set to true in composer.json. These options can be set by running: composer config minimum-stability beta composer config prefer-stable true For Windows only Composer needs the patch command to be installed (it is not part of Windows). To enable it install Git then add the C:\Program Files\Git\usr\bin folder to the system path. This installation step will be removed before the first stable release of this package.
Require this package with composer. composer require italia/spid-laravel
Exclude the URIs used by this package from CSRF protection because the the Identity Providers can't know what CSRF token include in their POST requests sent to your routes. In your app/Http/Middleware/VerifyCsrfToken.php set '/spid/*' as an element of the $except array. <?php namespace App\Http\Middleware; use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware; class VerifyCsrfToken extends Middleware { /** * The URIs that should be excluded from CSRF verification. * * @var array */ protected $except = [ '/spid/*' ]; }