Drops the dedicated /settings/authentication/providers/{provider}/callback
route added in the previous refactor — registering a second callback URL
in each OAuth app is more ops cost than the trade is worth.
Back to one callback URL per provider, with a small `Auth::check()`
branch in the auth controllers' callbacks. The check is safe because
the redirects that initiate the round-trip enforce the right
middleware (signup/login is `guest`-only, connect is `auth`-only),
so the auth state at callback time matches the flow's intent.
|
||
|---|---|---|
| .. | ||
| ai.php | ||
| api.php | ||
| app.php | ||
| auth.php | ||
| channels.php | ||
| console.php | ||
| web.php | ||