{"id":1,"date":"2025-08-23T19:25:58","date_gmt":"2025-08-23T19:25:58","guid":{"rendered":"https:\/\/1v0.net\/blog\/?p=1"},"modified":"2025-08-26T08:51:05","modified_gmt":"2025-08-26T08:51:05","slug":"how-to-add-google-login-laravel-12","status":"publish","type":"post","link":"https:\/\/1v0.net\/blog\/how-to-add-google-login-laravel-12\/","title":{"rendered":"How to Add Google Login to a Laravel 12 App with Socialite"},"content":{"rendered":"\n

Every time I built a new Laravel project, the request came up: <\/p>\n\n\n\n

\u201cCan we let users sign in with Google?\u201d<\/em> <\/p>\n\n\n\n

At first, I\u2019d copy snippets from old projects, tweak migrations, and hope nothing broke. Eventually, I streamlined the process \u2014 and in this post I\u2019ll walk you through the clean, Laravel 12-friendly way to add Google login with Socialite.<\/p>\n\n\n\n

Google login removes password friction and boosts conversions. In Laravel, the easiest, most secure way to add it is with Socialite<\/strong>.<\/p>\n\n\n\n

\n

What you\u2019ll build:<\/strong> a \u201cContinue with Google\u201d button that redirects users to Google, returns with their profile, and logs them in (or signs them up) safely.<\/p>\n<\/blockquote>\n\n\n\n

<\/p>\n\n\n\n

<\/div>\n\n\n\n

1 – Install Socialite<\/strong><\/h2>\n\n\n\n

<\/p>\n\n\n

composer require<\/span> laravel\/socialite<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Register the facade if you don\u2019t use package auto-discovery (most apps don\u2019t need this):<\/p>\n\n\n
\/\/ config\/app.php (only if NOT auto-discovered)<\/span>\n<\/span><\/span>'aliases'<\/span> => [\n<\/span><\/span>    \/\/ ...<\/span>\n<\/span><\/span>    'Socialite'<\/span> => Laravel\\Socialite\\Facades\\Socialite::class,\n<\/span><\/span>];\n<\/span><\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
<\/p>\n\n\n\n
<\/div>\n\n\n\n
2 – Create Google OAuth credentials<\/strong><\/h2>\n\n\n\n
<\/p>\n\n\n\n
    \n
  1. Go to Google Cloud Console \u2192 APIs & Services \u2192 <\/strong><\/li>\n\n\n\n
  2. Credentials<\/strong>. Create OAuth 2.0 Client ID<\/strong> (type: Web application<\/em>).<\/li>\n\n\n\n
  3. Add an Authorized redirect URI<\/strong> (must match exactly):
    <\/li>\n<\/ol>\n\n\n
    https:\/\/your-domain.com\/auth\/google\/callback<\/span><\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
    for local dev<\/p>\n\n\n
    http:\/\/localhost:8000\/auth\/google\/callback<\/span><\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
    Copy your Client ID<\/strong> and Client Secret<\/strong>.<\/p>\n\n\n\n
    <\/p>\n\n\n\n
    <\/div>\n\n\n\n
    3 – Configure Laravel<\/strong><\/h2>\n\n\n\n
    <\/p>\n\n\n\n
    .env<\/p>\n\n\n
    GOOGLE_CLIENT_ID=your_id_here\n<\/span><\/span>GOOGLE_CLIENT_SECRET=your_secret_here\n<\/span><\/span>GOOGLE_REDIRECT_URI=${APP_URL}\/auth\/google\/callback\n<\/span><\/span>\n<\/span><\/span># Make sure APP_URL and session domain are correct for your env:<\/span>\n<\/span><\/span>APP_URL=http:\/\/localhost:8000<\/span>\n<\/span><\/span># SESSION_DOMAIN=.your-domain.com     # if using subdomains like demo.your-domain.com<\/span>\n<\/span><\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    <\/p>\n\n\n\n
    config\/services.php<\/p>\n\n\n
    'google'<\/span> => [\n<\/span><\/span>    'client_id'<\/span>     => env('GOOGLE_CLIENT_ID'<\/span>),\n<\/span><\/span>    'client_secret'<\/span> => env('GOOGLE_CLIENT_SECRET'<\/span>),\n<\/span><\/span>    'redirect'<\/span>      => env('GOOGLE_REDIRECT_URI'<\/span>),\n<\/span><\/span>],\n<\/span><\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    <\/p>\n\n\n\n
    <\/div>\n\n\n\n
    4 – Add routes<\/strong><\/h2>\n\n\n\n
    <\/p>\n\n\n
    \/\/ routes\/web.php<\/span>\n<\/span><\/span>use<\/span> App<\/span>\\Http<\/span>\\Controllers<\/span>\\Auth<\/span>\\GoogleController<\/span>;\n<\/span><\/span>\n<\/span><\/span>Route::middleware('guest'<\/span>)->group(function<\/span> ()<\/span> <\/span>{\n<\/span><\/span>    Route::get('\/auth\/google\/redirect'<\/span>, [GoogleController::class, 'redirect'<\/span>])\n<\/span><\/span>        ->name('google.redirect'<\/span>);\n<\/span><\/span>    Route::get('\/auth\/google\/callback'<\/span>, [GoogleController::class, 'callback'<\/span>])\n<\/span><\/span>        ->name('google.callback'<\/span>);\n<\/span><\/span>});\n<\/span><\/span>\n<\/span><\/span>\/\/ (Optional) If you\u2019ll allow linking a Google account for logged-in users<\/span>\n<\/span><\/span>Route::middleware('auth'<\/span>)->group(function<\/span> ()<\/span> <\/span>{\n<\/span><\/span>    Route::post('\/account\/google\/disconnect'<\/span>, [GoogleController::class, 'disconnect'<\/span>])\n<\/span><\/span>        ->name('google.disconnect'<\/span>);\n<\/span><\/span>});\n<\/span><\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    <\/p>\n\n\n\n
    <\/div>\n\n\n\n
    5 – Prepare your users table (store google_id, avatar, etc.)<\/strong><\/h2>\n\n\n\n
    <\/p>\n\n\n
    php<\/span> artisan<\/span> make<\/span>:migration<\/span> add_google_columns_to_users_table<\/span><\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n
    \/\/ database\/migrations\/xxxx_xx_xx_xxxxxx_add_google_columns_to_users_table.php<\/span>\n<\/span><\/span>use<\/span> Illuminate<\/span>\\Database<\/span>\\Migrations<\/span>\\Migration<\/span>;\n<\/span><\/span>use<\/span> Illuminate<\/span>\\Database<\/span>\\Schema<\/span>\\Blueprint<\/span>;\n<\/span><\/span>use<\/span> Illuminate<\/span>\\Support<\/span>\\Facades<\/span>\\Schema<\/span>;\n<\/span><\/span>\n<\/span><\/span>return<\/span> new<\/span> class<\/span> extends<\/span> Migration<\/span> <\/span>{\n<\/span><\/span>    public<\/span> function<\/span> up<\/span>()<\/span>: void<\/span> <\/span>{\n<\/span><\/span>        Schema::table('users'<\/span>, function<\/span> (Blueprint $table)<\/span> <\/span>{\n<\/span><\/span>            $table->string('google_id'<\/span>)->nullable()->index();\n<\/span><\/span>            $table->string('avatar'<\/span>)->nullable();\n<\/span><\/span>            $table->json('social_meta'<\/span>)->nullable(); \/\/ optional for raw payload<\/span>\n<\/span><\/span>        });\n<\/span><\/span>    }\n<\/span><\/span>\n<\/span><\/span>    public<\/span> function<\/span> down<\/span>()<\/span>: void<\/span> <\/span>{\n<\/span><\/span>        Schema::table('users'<\/span>, function<\/span> (Blueprint $table)<\/span> <\/span>{\n<\/span><\/span>            $table->dropColumn(['google_id'<\/span>, 'avatar'<\/span>, 'social_meta'<\/span>]);\n<\/span><\/span>        });\n<\/span><\/span>    }\n<\/span><\/span>};\n<\/span><\/span>\n<\/span><\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n
    php artisan migrate<\/code><\/span><\/pre>\n\n\n
    <\/p>\n\n\n\n
    <\/div>\n\n\n\n
    6 – Build the controller<\/strong><\/h2>\n\n\n\n
    <\/p>\n\n\n
    \/\/ app\/Http\/Controllers\/Auth\/GoogleController.php<\/span>\n<\/span><\/span>namespace<\/span> App<\/span>\\Http<\/span>\\Controllers<\/span>\\Auth<\/span>;\n<\/span><\/span>\n<\/span><\/span>use<\/span> App<\/span>\\Http<\/span>\\Controllers<\/span>\\Controller<\/span>;\n<\/span><\/span>use<\/span> App<\/span>\\Models<\/span>\\User<\/span>;\n<\/span><\/span>use<\/span> Illuminate<\/span>\\Support<\/span>\\Facades<\/span>\\Auth<\/span>;\n<\/span><\/span>use<\/span> Illuminate<\/span>\\Support<\/span>\\Str<\/span>;\n<\/span><\/span>use<\/span> Laravel<\/span>\\Socialite<\/span>\\Facades<\/span>\\Socialite<\/span>;\n<\/span><\/span>\n<\/span><\/span>class<\/span> GoogleController<\/span> extends<\/span> Controller<\/span><\/span>\n<\/span><\/span><\/span>{\n<\/span><\/span>    \/\/ Step 1: send user to Google<\/span>\n<\/span><\/span>    public<\/span> function<\/span> redirect<\/span>()<\/span><\/span>\n<\/span><\/span>    <\/span>{\n<\/span><\/span>        \/\/ Request minimal scopes; OpenID gives you a stable sub (id)<\/span>\n<\/span><\/span>        return<\/span> Socialite::driver('google'<\/span>)\n<\/span><\/span>            ->scopes(['openid'<\/span>, 'profile'<\/span>, 'email'<\/span>])\n<\/span><\/span>            ->redirect();\n<\/span><\/span>    }\n<\/span><\/span>\n<\/span><\/span>    \/\/ Step 2: handle Google callback<\/span>\n<\/span><\/span>    public<\/span> function<\/span> callback<\/span>()<\/span><\/span>\n<\/span><\/span>    <\/span>{\n<\/span><\/span>        \/\/ Use stateless() only if you know session\/state won\u2019t persist (e.g., API)<\/span>\n<\/span><\/span>        $googleUser = Socialite::driver('google'<\/span>)->user();\n<\/span><\/span>\n<\/span><\/span>        \/\/ Defensive: Google should always provide email when using 'email' scope<\/span>\n<\/span><\/span>        $email = $googleUser->getEmail();\n<\/span><\/span>        $googleId = $googleUser->getId();\n<\/span><\/span>        $name = $googleUser->getName() ?: Str::before($email, '@'<\/span>);\n<\/span><\/span>        $avatar = $googleUser->getAvatar();\n<\/span><\/span>\n<\/span><\/span>        \/\/ 1) If a user has already linked Google, log them in<\/span>\n<\/span><\/span>        $user = User::where('google_id'<\/span>, $googleId)->first();\n<\/span><\/span>\n<\/span><\/span>        if<\/span> (! $user && $email) {\n<\/span><\/span>            \/\/ 2) If email exists but not linked yet, decide your policy:<\/span>\n<\/span><\/span>            \/\/    Option A: link automatically (safer if email is verified by Google)<\/span>\n<\/span><\/span>            \/\/    Option B: ask user to confirm linking via email step<\/span>\n<\/span><\/span>            $user = User::where('email'<\/span>, $email)->first();\n<\/span><\/span>            if<\/span> ($user) {\n<\/span><\/span>                \/\/ Link existing account<\/span>\n<\/span><\/span>                $user->forceFill([\n<\/span><\/span>                    'google_id'<\/span>   => $googleId,\n<\/span><\/span>                    'avatar'<\/span>      => $user->avatar ?: $avatar,\n<\/span><\/span>                    'social_meta'<\/span> => json_encode(['google'<\/span> => $googleUser->user]),\n<\/span><\/span>                ])->save();\n<\/span><\/span>            }\n<\/span><\/span>        }\n<\/span><\/span>\n<\/span><\/span>        if<\/span> (! $user) {\n<\/span><\/span>            \/\/ 3) Otherwise create a new user account<\/span>\n<\/span><\/span>            $user = User::create([\n<\/span><\/span>                'name'<\/span>       => $name,\n<\/span><\/span>                'email'<\/span>      => $email,            \/\/ may be null if Google doesn\u2019t return it<\/span>\n<\/span><\/span>                'password'<\/span>   => bcrypt(Str::random(32<\/span>)), \/\/ random placeholder<\/span>\n<\/span><\/span>                'google_id'<\/span>  => $googleId,\n<\/span><\/span>                'avatar'<\/span>     => $avatar,\n<\/span><\/span>                'social_meta'<\/span>=> json_encode(['google'<\/span> => $googleUser->user]),\n<\/span><\/span>            ]);\n<\/span><\/span>\n<\/span><\/span>            \/\/ (Optional) assign default role, seed profile, etc.<\/span>\n<\/span><\/span>            \/\/ $user->assignRole('User');<\/span>\n<\/span><\/span>        }\n<\/span><\/span>\n<\/span><\/span>        Auth::login($user, remember: true<\/span>);\n<\/span><\/span>\n<\/span><\/span>        return<\/span> redirect()->intended('\/'<\/span>); \/\/ or your dashboard route<\/span>\n<\/span><\/span>    }\n<\/span><\/span>\n<\/span><\/span>    \/\/ Optional disconnect (keep local password login)<\/span>\n<\/span><\/span>    public<\/span> function<\/span> disconnect<\/span>()<\/span><\/span>\n<\/span><\/span>    <\/span>{\n<\/span><\/span>        $user = auth()->user();\n<\/span><\/span>        $user->forceFill(['google_id'<\/span> => null<\/span>])->save();\n<\/span><\/span>\n<\/span><\/span>        return<\/span> back()->with('status'<\/span>, 'Google account disconnected.'<\/span>);\n<\/span><\/span>    }\n<\/span><\/span>}\n<\/span><\/span>\n<\/span><\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    \n
    Security note:<\/strong> If you don\u2019t<\/em> want automatic linking when emails match, replace that part with a \u201cconfirm link\u201d screen and send a verification email to the address first.<\/p>\n<\/blockquote>\n\n\n\n
    <\/p>\n\n\n\n
    <\/div>\n\n\n\n
    7 – Add the \u201cContinue with Google\u201d button<\/strong><\/h2>\n\n\n\n
    <\/p>\n\n\n
    <a<\/span> href<\/span>=\"{{ route('google.redirect') }}\"<\/span> class<\/span>=\"btn btn-outline-dark w-100\"<\/span>><\/span>\n<\/span><\/span>  <i<\/span> class<\/span>=\"bi bi-google me-2\"<\/span>><\/span><\/i<\/span>><\/span> Continue with Google\n<\/span><\/span><\/a<\/span>><\/span>\n<\/span><\/span><\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
    <\/p>\n\n\n\n
    <\/div>\n\n\n\n
    8 – Common Errors<\/strong><\/h2>\n\n\n\n
    <\/p>\n\n\n\n
    Redirect URI mismatch<\/strong>
    Ensure the URI in Google Console matches your .env<\/code> GOOGLE_REDIRECT_URI<\/code> exactly<\/strong> (protocol, domain, path).<\/p>\n\n\n\n
    Invalid state \/ CSRF<\/strong>
    Make sure sessions work (correct APP_URL<\/code>, SESSION_DOMAIN<\/code>, cookies not blocked). Avoid stateless()<\/code> unless you know why.<\/p>\n\n\n\n
    Email is null<\/strong>
    Request email<\/code> scope and ensure the Google account actually has an email. If missing, consider prompting the user to add one after login.<\/p>\n\n\n\n
    Subdomains (demo.your-domain.com)<\/strong>
    Use a shared cookie domain (e.g., SESSION_DOMAIN=.your-domain.com<\/code>) if you log in on one subdomain and return to another.<\/p>\n\n\n\n
    <\/p>\n\n\n\n
    <\/div>\n\n\n\n
    9 –   \u201cLink Google\u201d from account settings<\/h2>\n\n\n\n
    <\/p>\n\n\n\n
    Allow logged-in users to connect their Google account later:<\/p>\n\n\n
    Route::middleware('auth'<\/span>)->get('\/account\/google\/connect'<\/span>, function<\/span>()<\/span> <\/span>{\n<\/span><\/span>    return<\/span> Socialite::driver('google'<\/span>)->redirect();\n<\/span><\/span>})->name('google.connect'<\/span>);\n<\/span><\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    In the callback, if auth()->check()<\/code>, attach<\/strong> google_id<\/code> to the current user instead of logging in a different user. This prevents account takeovers.<\/p>\n\n\n\n
    <\/span>
    \n
    Grab a production-ready implementation<\/strong><\/h2>\n\n\n\n
    If you don\u2019t want to wire up all the edge cases (UI, roles, permissions, settings toggles, demos), Grab a production-ready implementation<\/strong>:<\/p>\n\n\n\n
    \"\"<\/figure>
    \n
    Laravel Authentication & User Management Kit<\/strong><\/h2>\n\n\n\n
    Production-ready auth (Fortify + Socialite), roles\/permissions (Spatie), settings UI, polished Bootstrap frontend, and full docs \u2014 so you can launch in minutes, not weeks.<\/p>\n\n\n\n
    \n
    Learn more<\/a><\/div>\n<\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
    <\/p>\n","protected":false},"excerpt":{"rendered":"
    Google login removes password friction and boosts conversions. In Laravel, the easiest, most secure way to add it is with Socialite.<\/p>\n
    What you\u2019ll build: a \u201cContinue with Google\u201d button that redirects users to Google, returns with their profile, and logs them in (or signs them up) safely.<\/p>\n","protected":false},"author":1,"featured_media":65,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"[]"},"categories":[7],"tags":[12,13,20],"class_list":["post-1","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-laravel","tag-authentication","tag-login","tag-social-login"],"_links":{"self":[{"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/posts\/1","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/comments?post=1"}],"version-history":[{"count":28,"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/posts\/1\/revisions"}],"predecessor-version":[{"id":95,"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/posts\/1\/revisions\/95"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/media\/65"}],"wp:attachment":[{"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/media?parent=1"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/categories?post=1"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/1v0.net\/blog\/wp-json\/wp\/v2\/tags?post=1"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}