feat(auth): Add Clerk OAuth Provider (#5553)

.cursor/rules/security-patterns.mdc

@@ -21,6 +21,7 @@ Coolify implements **defense-in-depth security** with multiple layers of protect
 - **Supported Providers**:
   - Google OAuth
   - Microsoft Azure AD
+  - Clerk
   - Authentik
   - Discord
   - GitHub (via GitHub Apps)

.cursor/rules/technology-stack.mdc

@@ -90,7 +90,7 @@ alwaysApply: false
 - **Purpose**: OAuth provider integration
 - **Providers**:
   - GitHub, GitLab, Google
-  - Microsoft Azure, Authentik, Discord
+  - Microsoft Azure, Authentik, Discord, Clerk
   - Custom OAuth implementations
 
 ## Background Processing

app/Models/OauthSetting.php

@@ -27,6 +27,7 @@ class OauthSetting extends Model
             case 'azure':
                 return filled($this->client_id) && filled($this->client_secret) && filled($this->tenant);
             case 'authentik':
+            case 'clerk':
                 return filled($this->client_id) && filled($this->client_secret) && filled($this->base_url);
             default:
                 return filled($this->client_id) && filled($this->client_secret);

app/Providers/EventServiceProvider.php

@@ -9,6 +9,7 @@ use Illuminate\Foundation\Events\MaintenanceModeEnabled;
 use Illuminate\Foundation\Support\Providers\EventServiceProvider as ServiceProvider;
 use SocialiteProviders\Authentik\AuthentikExtendSocialite;
 use SocialiteProviders\Azure\AzureExtendSocialite;
+use SocialiteProviders\Clerk\ClerkExtendSocialite;
 use SocialiteProviders\Discord\DiscordExtendSocialite;
 use SocialiteProviders\Google\GoogleExtendSocialite;
 use SocialiteProviders\Infomaniak\InfomaniakExtendSocialite;
@@ -26,6 +27,7 @@ class EventServiceProvider extends ServiceProvider
         SocialiteWasCalled::class => [
             AzureExtendSocialite::class.'@handle',
             AuthentikExtendSocialite::class.'@handle',
+            ClerkExtendSocialite::class.'@handle',
             DiscordExtendSocialite::class.'@handle',
             GoogleExtendSocialite::class.'@handle',
             InfomaniakExtendSocialite::class.'@handle',

bootstrap/helpers/socialite.php

@@ -22,15 +22,15 @@ function get_socialite_provider(string $provider)
         return Socialite::driver('azure')->setConfig($azure_config);
     }
 
-    if ($provider == 'authentik') {
+    if ($provider == 'authentik' || $provider == 'clerk') {
-        $authentik_config = new \SocialiteProviders\Manager\Config(
+        $authentik_clerk_config = new \SocialiteProviders\Manager\Config(
             $oauth_setting->client_id,
             $oauth_setting->client_secret,
             $oauth_setting->redirect_uri,
             ['base_url' => $oauth_setting->base_url],
         );
 
-        return Socialite::driver('authentik')->setConfig($authentik_config);
+        return Socialite::driver($provider)->setConfig($authentik_clerk_config);
     }
 
     if ($provider == 'google') {

composer.json

@@ -39,6 +39,7 @@
         "resend/resend-laravel": "^0.17.0",
         "sentry/sentry-laravel": "^4.13",
         "socialiteproviders/authentik": "^5.2",
+        "socialiteproviders/clerk": "^5.0",
         "socialiteproviders/discord": "^4.2",
         "socialiteproviders/google": "^4.1",
         "socialiteproviders/infomaniak": "^4.0",

composer.lock

@@ -7483,6 +7483,17 @@
             "time": "2023-11-07T22:21:16+00:00"
         },
         {
+            "name": "socialiteproviders/clerk",
+            "version": "5.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/SocialiteProviders/Clerk.git",
+                "reference": "41e123036001ff37851b9622a910010c0e487d6a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/SocialiteProviders/Clerk/zipball/41e123036001ff37851b9622a910010c0e487d6a",
+                "reference": "41e123036001ff37851b9622a910010c0e487d6a",
             "name": "socialiteproviders/discord",
             "version": "4.2.0",
             "source": {
@@ -7498,12 +7509,13 @@
             },
             "require": {
                 "ext-json": "*",
-                "php": "^7.4 || ^8.0",
+                "php": "^8.0",
-                "socialiteproviders/manager": "~4.0"
+                "socialiteproviders/manager": "^4.4"
             },
             "type": "library",
             "autoload": {
                 "psr-4": {
+                    "SocialiteProviders\\Clerk\\": ""
                     "SocialiteProviders\\Discord\\": ""
                 }
             },
@@ -7513,6 +7525,13 @@
             ],
             "authors": [
                 {
+                    "name": "Ignacio Cano",
+                    "email": "dev@nacho.sh"
+                }
+            ],
+            "description": "Clerk OAuth2 Provider for Laravel Socialite",
+            "keywords": [
+                "clerk",
                     "name": "Christopher Eklund",
                     "email": "eklundchristopher@gmail.com"
                 }
@@ -7526,6 +7545,11 @@
                 "socialite"
             ],
             "support": {
+                "docs": "https://socialiteproviders.com/clerk",
+                "issues": "https://github.com/socialiteproviders/providers/issues",
+                "source": "https://github.com/socialiteproviders/providers"
+            },
+            "time": "2024-02-19T12:17:59+00:00"
                 "docs": "https://socialiteproviders.com/discord",
                 "issues": "https://github.com/socialiteproviders/providers/issues",
                 "source": "https://github.com/socialiteproviders/providers"

config/services.php

@@ -46,6 +46,13 @@ return [
         'redirect' => env('AUTHENTIK_REDIRECT_URI'),
     ],
 
+    'clerk' => [
+        'client_id' => env('CLERK_CLIENT_ID'),
+        'client_secret' => env('CLERK_CLIENT_SECRET'),
+        'redirect' => env('CLERK_REDIRECT_URI'),
+        'base_url' => env('CLERK_BASE_URL'),
+    ],
+
     'google' => [
         'client_id' => env('GOOGLE_CLIENT_ID'),
         'client_secret' => env('GOOGLE_CLIENT_SECRET'),

database/seeders/OauthSettingSeeder.php

@@ -17,6 +17,7 @@ class OauthSettingSeeder extends Seeder
             $providers = collect([
                 'azure',
                 'bitbucket',
+                'clerk',
                 'discord',
                 'github',
                 'gitlab',

lang/ar.json

@@ -3,6 +3,7 @@
     "auth.login.authentik": "تسجيل الدخول باستخدام Authentik",
     "auth.login.azure": "تسجيل الدخول باستخدام Microsoft",
     "auth.login.bitbucket": "تسجيل الدخول باستخدام Bitbucket",
+    "auth.login.clerk": "تسجيل الدخول باستخدام Clerk",
     "auth.login.discord": "تسجيل الدخول باستخدام Discord",
     "auth.login.github": "تسجيل الدخول باستخدام GitHub",
     "auth.login.gitlab": "تسجيل الدخول باستخدام Gitlab",

lang/az.json

@@ -3,6 +3,7 @@
   "auth.login.authentik": "Authentik ilə daxil ol",
   "auth.login.azure": "Azure ilə daxil ol",
   "auth.login.bitbucket": "Bitbucket ilə daxil ol",
+  "auth.login.clerk": "Clerk ilə daxil ol",
   "auth.login.discord": "Discord ilə daxil ol",
   "auth.login.github": "Github ilə daxil ol",
   "auth.login.gitlab": "GitLab ilə daxil ol",

lang/cs.json

@@ -2,6 +2,7 @@
     "auth.login": "Přihlásit se",
     "auth.login.azure": "Přihlásit se pomocí Microsoftu",
     "auth.login.bitbucket": "Přihlásit se pomocí Bitbucketu",
+    "auth.login.clerk": "Přihlásit se pomocí Clerk",
     "auth.login.discord": "Přihlásit se pomocí Discordu",
     "auth.login.github": "Přihlásit se pomocí GitHubu",
     "auth.login.gitlab": "Přihlásit se pomocí Gitlabu",

lang/de.json

@@ -2,6 +2,7 @@
     "auth.login": "Anmelden",
     "auth.login.azure": "Mit Microsoft anmelden",
     "auth.login.bitbucket": "Mit Bitbucket anmelden",
+    "auth.login.clerk": "Mit Clerk anmelden",
     "auth.login.discord": "Mit Discord anmelden",
     "auth.login.github": "Mit GitHub anmelden",
     "auth.login.gitlab": "Mit GitLab anmelden",

lang/en.json

@@ -3,6 +3,7 @@
     "auth.login.authentik": "Login with Authentik",
     "auth.login.azure": "Login with Microsoft",
     "auth.login.bitbucket": "Login with Bitbucket",
+    "auth.login.clerk": "Login with Clerk",
     "auth.login.discord": "Login with Discord",
     "auth.login.github": "Login with GitHub",
     "auth.login.gitlab": "Login with Gitlab",

lang/es.json

@@ -2,6 +2,7 @@
     "auth.login": "Iniciar Sesión",
     "auth.login.azure": "Acceder con Microsoft",
     "auth.login.bitbucket": "Acceder con Bitbucket",
+    "auth.login.clerk": "Acceder con Clerk",
     "auth.login.discord": "Acceder con Discord",
     "auth.login.github": "Acceder con GitHub",
     "auth.login.gitlab": "Acceder con Gitlab",

lang/fa.json

@@ -2,6 +2,7 @@
     "auth.login": "ورود",
     "auth.login.azure": "ورود با مایکروسافت",
     "auth.login.bitbucket": "ورود با Bitbucket",
+    "auth.login.clerk": "ورود با Clerk",
     "auth.login.discord": "ورود با Discord",
     "auth.login.github": "ورود با گیت هاب",
     "auth.login.gitlab": "ورود با گیت لب",

lang/fr.json

@@ -3,6 +3,7 @@
     "auth.login.authentik": "Connexion avec Authentik",
     "auth.login.azure": "Connexion avec Microsoft",
     "auth.login.bitbucket": "Connexion avec Bitbucket",
+    "auth.login.clerk": "Connexion avec Clerk",
     "auth.login.discord": "Connexion avec Discord",
     "auth.login.github": "Connexion avec GitHub",
     "auth.login.gitlab": "Connexion avec Gitlab",

lang/id.json

@@ -3,6 +3,7 @@
     "auth.login.authentik": "Masuk dengan Authentik",
     "auth.login.azure": "Masuk dengan Microsoft",
     "auth.login.bitbucket": "Masuk dengan Bitbucket",
+    "auth.login.clerk": "Masuk dengan Clerk",
     "auth.login.discord": "Masuk dengan Discord",
     "auth.login.github": "Masuk dengan GitHub",
     "auth.login.gitlab": "Masuk dengan Gitlab",

lang/it.json

@@ -3,6 +3,7 @@
     "auth.login.authentik": "Accedi con Authentik",
     "auth.login.azure": "Accedi con Microsoft",
     "auth.login.bitbucket": "Accedi con Bitbucket",
+    "auth.login.clerk": "Accedi con Clerk",
     "auth.login.discord": "Accedi con Discord",
     "auth.login.github": "Accedi con GitHub",
     "auth.login.gitlab": "Accedi con Gitlab",

lang/ja.json

@@ -2,6 +2,7 @@
     "auth.login": "ログイン",
     "auth.login.azure": "Microsoftでログイン",
     "auth.login.bitbucket": "Bitbucketでログイン",
+    "auth.login.clerk": "Clerkでログイン",
     "auth.login.discord": "Discordでログイン",
     "auth.login.github": "GitHubでログイン",
     "auth.login.gitlab": "Gitlabでログイン",

lang/no.json

@@ -3,6 +3,7 @@
     "auth.login.authentik": "Logg inn med Authentik",
     "auth.login.azure": "Logg inn med Microsoft",
     "auth.login.bitbucket": "Logg inn med Bitbucket",
+    "auth.login.clerk": "Logg inn med Clerk",
     "auth.login.discord": "Logg inn med Discord",
     "auth.login.github": "Logg inn med GitHub",
     "auth.login.gitlab": "Logg inn med Gitlab",

lang/pt-br.json

@@ -3,6 +3,7 @@
     "auth.login.authentik": "Entrar com Authentik",
     "auth.login.azure": "Entrar com Microsoft",
     "auth.login.bitbucket": "Entrar com Bitbucket",
+    "auth.login.clerk": "Entrar com Clerk",
     "auth.login.discord": "Entrar com Discord",
     "auth.login.github": "Entrar com GitHub",
     "auth.login.gitlab": "Entrar com Gitlab",

lang/pt.json

@@ -2,6 +2,7 @@
     "auth.login": "Entrar",
     "auth.login.azure": "Entrar com Microsoft",
     "auth.login.bitbucket": "Entrar com Bitbucket",
+    "auth.login.clerk": "Entrar com Clerk",
     "auth.login.discord": "Entrar com Discord",
     "auth.login.github": "Entrar com GitHub",
     "auth.login.gitlab": "Entrar com Gitlab",

lang/ro.json

@@ -2,6 +2,7 @@
     "auth.login": "Autentificare",
     "auth.login.azure": "Autentificare prin Microsoft",
     "auth.login.bitbucket": "Autentificare prin Bitbucket",
+    "auth.login.clerk": "Autentificare prin Clerk",
     "auth.login.discord": "Autentificare prin Discord",
     "auth.login.github": "Autentificare prin GitHub",
     "auth.login.gitlab": "Autentificare prin Gitlab",

lang/tr.json

@@ -2,6 +2,7 @@
     "auth.login": "Giriş",
     "auth.login.azure": "Microsoft ile Giriş Yap",
     "auth.login.bitbucket": "Bitbucket ile Giriş Yap",
+    "auth.login.clerk": "Clerk ile Giriş Yap",
     "auth.login.discord": "Discord ile Giriş Yap",
     "auth.login.github": "GitHub ile Giriş Yap",
     "auth.login.gitlab": "GitLab ile Giriş Yap",

lang/vi.json

@@ -2,6 +2,7 @@
     "auth.login": "Đăng Nhập",
     "auth.login.azure": "Đăng Nhập Bằng Microsoft",
     "auth.login.bitbucket": "Đăng Nhập Bằng Bitbucket",
+    "auth.login.clerk": "Đăng Nhập Bằng Clerk",
     "auth.login.discord": "Đăng Nhập Bằng Discord",
     "auth.login.github": "Đăng Nhập Bằng GitHub",
     "auth.login.gitlab": "Đăng Nhập Bằng Gitlab",

lang/zh-cn.json

@@ -2,6 +2,7 @@
     "auth.login": "登录",
     "auth.login.azure": "使用 Microsoft 登录",
     "auth.login.bitbucket": "使用 Bitbucket 登录",
+    "auth.login.clerk": "使用 Clerk 登录",
     "auth.login.discord": "使用 Discord 登录",
     "auth.login.github": "使用 GitHub 登录",
     "auth.login.gitlab": "使用 Gitlab 登录",

lang/zh-tw.json

@@ -2,6 +2,7 @@
     "auth.login": "登入",
     "auth.login.azure": "使用 Microsoft 登入",
     "auth.login.bitbucket": "使用 Bitbucket 登入",
+    "auth.login.clerk": "使用 Clerk 登入",
     "auth.login.discord": "使用 Discord 登入",
     "auth.login.github": "使用 GitHub 登入",
     "auth.login.gitlab": "使用 Gitlab 登入",

resources/views/livewire/settings-oauth.blade.php

@@ -37,7 +37,7 @@
                                 helper="Optional parameter that supplies a hosted domain (HD) to Google, which<br>triggers a login hint to be displayed on the OAuth screen with this domain.<br><br><a class='underline dark:text-warning text-coollabs' href='https://developers.google.com/identity/openid-connect/openid-connect#hd-param' target='_blank'>Google Documentation</a>"
                                 label="Tenant" />
                         @endif
-                        @if ($oauth_setting->provider == 'authentik')
+                        @if ($oauth_setting->provider == 'authentik' || $oauth_setting->provider == 'clerk')
                             <x-forms.input id="oauth_settings_map.{{ $oauth_setting->provider }}.base_url"
                                 label="Base URL" />
                         @endif