in progress

app/Http/Controllers/ApiUserController.php

+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+class ApiUserController extends Controller
+{
+    public function index()
+    {
+    	return view('home');
+    }
+}

app/Http/Controllers/AuthController.php

+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Microsoft\Graph\Graph;
+use Microsoft\Graph\Model;
+use App\TokenStore\TokenCache;
+
+class AuthController extends Controller
+{
+  public function signin()
+  {
+    // Initialize the OAuth client
+    $oauthClient = new \League\OAuth2\Client\Provider\GenericProvider([
+      'clientId'                => env('OAUTH_APP_ID'),
+      'clientSecret'            => env('OAUTH_APP_PASSWORD'),
+      'redirectUri'             => env('OAUTH_REDIRECT_URI'),
+      'urlAuthorize'            => env('OAUTH_AUTHORITY').env('OAUTH_AUTHORIZE_ENDPOINT'),
+      'urlAccessToken'          => env('OAUTH_AUTHORITY').env('OAUTH_TOKEN_ENDPOINT'),
+      'urlResourceOwnerDetails' => '',
+      'scopes'                  => env('OAUTH_SCOPES')
+    ]);
+
+    $authUrl = $oauthClient->getAuthorizationUrl();
+
+    // Save client state so we can validate in callback
+    session(['oauthState' => $oauthClient->getState()]);
+
+    // Redirect to AAD signin page
+    return redirect()->away($authUrl);
+  }
+
+  public function callback(Request $request)
+  {
+    // Validate state
+    $expectedState = session('oauthState');
+    $request->session()->forget('oauthState');
+    $providedState = $request->query('state');
+
+    if (!isset($expectedState)) {
+      // If there is no expected state in the session,
+      // do nothing and redirect to the home page.
+      return redirect('/');
+    }
+
+    if (!isset($providedState) || $expectedState != $providedState) {
+      return redirect('/')
+        ->with('error', 'Invalid auth state')
+        ->with('errorDetail', 'The provided auth state did not match the expected value');
+    }
+
+    // Authorization code should be in the "code" query param
+    $authCode = $request->query('code');
+    if (isset($authCode)) {
+      // Initialize the OAuth client
+      $oauthClient = new \League\OAuth2\Client\Provider\GenericProvider([
+        'clientId'                => env('OAUTH_APP_ID'),
+        'clientSecret'            => env('OAUTH_APP_PASSWORD'),
+        'redirectUri'             => env('OAUTH_REDIRECT_URI'),
+        'urlAuthorize'            => env('OAUTH_AUTHORITY').env('OAUTH_AUTHORIZE_ENDPOINT'),
+        'urlAccessToken'          => env('OAUTH_AUTHORITY').env('OAUTH_TOKEN_ENDPOINT'),
+        'urlResourceOwnerDetails' => '',
+        'scopes'                  => env('OAUTH_SCOPES')
+      ]);
+
+      try {
+        // Make the token request
+        $accessToken = $oauthClient->getAccessToken('authorization_code', [
+          'code' => $authCode
+        ]);
+
+        $graph = new Graph();
+        $graph->setAccessToken($accessToken->getToken());
+
+        $user = $graph->createRequest('GET', '/me')
+          ->setReturnType(Model\User::class)
+          ->execute();
+
+        $tokenCache = new TokenCache();
+        $tokenCache->storeTokens($accessToken, $user);
+
+        return redirect('/');
+      }
+      catch (League\OAuth2\Client\Provider\Exception\IdentityProviderException $e) {
+        return redirect('/')
+          ->with('error', 'Error requesting access token')
+          ->with('errorDetail', $e->getMessage());
+      }
+    }
+
+    return redirect('/')
+      ->with('error', $request->query('error'))
+      ->with('errorDetail', $request->query('error_description'));
+  }
+
+  public function signout()
+  {
+    $tokenCache = new TokenCache();
+    $tokenCache->clearTokens();
+    return redirect('/');
+  }
+}
\ No newline at end of file

app/Http/Controllers/HomeController.php

+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+class HomeController extends Controller
+{
+    /**
+     * Create a new controller instance.
+     *
+     * @return void
+     */
+    public function __construct()
+    {
+        $this->middleware('auth');
+    }
+
+    /**
+     * Show the application dashboard.
+     *
+     * @return \Illuminate\Contracts\Support\Renderable
+     */
+    public function index()
+    {
+        return view('home');
+    }
+}

app/Http/Controllers/OfficeApiController.php

+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Microsoft\Graph\Graph;
+use Microsoft\Graph\Model;
+use App\TokenStore\TokenCache;
+use Session;
+
+class OfficeApiController extends Controller
+{
+
+  public function signin()
+  {
+    // Initialize the OAuth client
+    $oauthClient = new \League\OAuth2\Client\Provider\GenericProvider([
+      'clientId'                => env('OAUTH_APP_ID'),
+      'clientSecret'            => env('OAUTH_APP_PASSWORD'),
+      'redirectUri'             => env('OAUTH_REDIRECT_URI'),
+      'urlAuthorize'            => env('OAUTH_AUTHORITY').env('OAUTH_AUTHORIZE_ENDPOINT'),
+      'urlAccessToken'          => env('OAUTH_AUTHORITY').env('OAUTH_TOKEN_ENDPOINT'),
+      'urlResourceOwnerDetails' => '',
+      'scopes'                  => env('OAUTH_SCOPES')
+    ]);
+
+    $authUrl = $oauthClient->getAuthorizationUrl();
+
+    // Save client state so we can validate in callback
+    session(['oauthState' => $oauthClient->getState()]);
+
+    // Redirect to AAD signin page
+    return redirect()->away($authUrl);
+  }
+
+  public function callback(Request $request)
+  {
+    // Validate state
+    $expectedState = session('oauthState');
+    $request->session()->forget('oauthState');
+    $providedState = $request->query('state');
+
+    if (!isset($expectedState)) {
+      // If there is no expected state in the session,
+      // do nothing and redirect to the home page.
+      return redirect('/');
+    }
+
+    if (!isset($providedState) || $expectedState != $providedState) {
+      return redirect('/')
+        ->with('error', 'Invalid auth state')
+        ->with('errorDetail', 'The provided auth state did not match the expected value');
+    }
+
+    // Authorization code should be in the "code" query param
+    $authCode = $request->query('code');
+    if (isset($authCode)) {
+      // Initialize the OAuth client
+      $oauthClient = new \League\OAuth2\Client\Provider\GenericProvider([
+        'clientId'                => env('OAUTH_APP_ID'),
+        'clientSecret'            => env('OAUTH_APP_PASSWORD'),
+        'redirectUri'             => env('OAUTH_REDIRECT_URI'),
+        'urlAuthorize'            => env('OAUTH_AUTHORITY').env('OAUTH_AUTHORIZE_ENDPOINT'),
+        'urlAccessToken'          => env('OAUTH_AUTHORITY').env('OAUTH_TOKEN_ENDPOINT'),
+        'urlResourceOwnerDetails' => '',
+        'scopes'                  => env('OAUTH_SCOPES')
+      ]);
+
+      try {
+        // Make the token request
+        $accessToken = $oauthClient->getAccessToken('authorization_code', [
+          'code' => $authCode
+        ]);
+
+        $graph = new Graph();
+        $graph->setAccessToken($accessToken->getToken());
+
+        $user = $graph->createRequest('GET', '/me')
+          ->setReturnType(Model\User::class)
+          ->execute();
+
+        // $tokenCache = new TokenCache();
+        // $tokenCache->storeTokens($accessToken, $user);
+
+        Session::put('accessToken',$accessToken->getToken());
+        Session::put('refreshToken',$accessToken->getRefreshToken());
+        Session::put('tokenExpires',$accessToken->getExpires());
+        Session::put('userName',$user->getDisplayName());
+        Session::put('userEmail',null !== $user->getMail() ? $user->getMail() : $user->getUserPrincipalName());
+
+        return redirect('/users');
+      }
+      catch (League\OAuth2\Client\Provider\Exception\IdentityProviderException $e) {
+        return redirect('/')
+          ->with('error', 'Error requesting access token')
+          ->with('errorDetail', $e->getMessage());
+      }
+    }
+
+    return redirect('/')
+      ->with('error', $request->query('error'))
+      ->with('errorDetail', $request->query('error_description'));
+  }
+
+  public function signout()
+  {
+    $tokenCache = new TokenCache();
+    $tokenCache->clearTokens();
+    return redirect('/');
+  }
+}

app/Http/Kernel.php

@@ -28,10 +28,10 @@ class Kernel extends HttpKernel
      */
     protected $middlewareGroups = [
         'web' => [
-            \App\Http\Middleware\EncryptCookies::class,
+            // \App\Http\Middleware\EncryptCookies::class,
             \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
             \Illuminate\Session\Middleware\StartSession::class,
-            // \Illuminate\Session\Middleware\AuthenticateSession::class,
+            \Illuminate\Session\Middleware\AuthenticateSession::class,
             \Illuminate\View\Middleware\ShareErrorsFromSession::class,
             \App\Http\Middleware\VerifyCsrfToken::class,
             \Illuminate\Routing\Middleware\SubstituteBindings::class,

app/TokenStore/TokenCache.php

+<?php
+
+namespace App\TokenStore;
+use Session;
+
+class TokenCache {
+  public function storeTokens($accessToken, $user) {
+    // Session::put('accessToken',$accessToken->getToken());
+    // Session::put('refreshToken',$accessToken->getRefreshToken());
+    // Session::put('tokenExpires',$accessToken->getExpires());
+    // Session::put('userName',$user->getDisplayName());
+    // Session::put('userEmail',null !== $user->getMail() ? $user->getMail() : $user->getUserPrincipalName());
+    session([
+      'accessToken' => $accessToken->getToken(),
+      'refreshToken' => $accessToken->getRefreshToken(),
+      'tokenExpires' => $accessToken->getExpires(),
+      'userName' => $user->getDisplayName(),
+      'userEmail' => null !== $user->getMail() ? $user->getMail() : $user->getUserPrincipalName()
+    ]);
+  }
+
+  public function updateTokens($accessToken) {
+    // Session::put('accessToken',$accessToken->getToken());
+    // Session::put('refreshToken',$accessToken->getRefreshToken());
+    // Session::put('tokenExpires',$accessToken->getExpires());
+
+    session([
+      'accessToken' => $accessToken->getToken(),
+      'refreshToken' => $accessToken->getRefreshToken(),
+      'tokenExpires' => $accessToken->getExpires()
+    ]);
+  }
+
+  public function clearTokens() {
+    // Session::forget('accessToken');
+    // Session::forget('refreshToken');
+    // Session::forget('tokenExpires');
+    // Session::forget('userName');
+    // Session::forget('userEmail');
+
+    session()->forget('accessToken');
+    session()->forget('refreshToken');
+    session()->forget('tokenExpires');
+    session()->forget('userName');
+    session()->forget('userEmail');
+  }
+
+  public function getAccessToken() {
+    // Check if tokens exist
+    if (empty(session('accessToken')) ||
+        empty(session('refreshToken')) ||
+        empty(session('tokenExpires'))) {
+      return '';
+    }
+
+    // Check if token is expired
+    //Get current time + 5 minutes (to allow for time differences)
+    $now = time() + 300;
+    if (session('tokenExpires') <= $now) {
+      // Token is expired (or very close to it)
+      // so let's refresh
+
+      // Initialize the OAuth client
+      $oauthClient = new \League\OAuth2\Client\Provider\GenericProvider([
+        'clientId'                => env('OAUTH_APP_ID'),
+        'clientSecret'            => env('OAUTH_APP_PASSWORD'),
+        'redirectUri'             => env('OAUTH_REDIRECT_URI'),
+        'urlAuthorize'            => env('OAUTH_AUTHORITY').env('OAUTH_AUTHORIZE_ENDPOINT'),
+        'urlAccessToken'          => env('OAUTH_AUTHORITY').env('OAUTH_TOKEN_ENDPOINT'),
+        'urlResourceOwnerDetails' => '',
+        'scopes'                  => env('OAUTH_SCOPES')
+      ]);
+
+      try {
+        $newToken = $oauthClient->getAccessToken('refresh_token', [
+          'refresh_token' => session('refreshToken')
+        ]);
+
+        // Store the new values
+        $this->updateTokens($newToken);
+
+        return $newToken->getToken();
+      }
+      catch (League\OAuth2\Client\Provider\Exception\IdentityProviderException $e) {
+        return '';
+      }
+    }
+
+    // Token is still valid, just return it
+    return session('accessToken');
+  }
+}
\ No newline at end of file

composer.json

@@ -11,11 +11,14 @@
         "php": "^7.2",
         "fideloper/proxy": "^4.0",
         "laravel/framework": "^6.2",
-        "laravel/tinker": "^2.0"
+        "laravel/tinker": "^2.0",
+        "league/oauth2-client": "dev-master",
+        "microsoft/microsoft-graph": "^1.10"
     },
     "require-dev": {
         "facade/ignition": "^1.4",
         "fzaninotto/faker": "^1.4",
+        "laravel/ui": "^1.1",
         "mockery/mockery": "^1.0",
         "nunomaduro/collision": "^3.0",
         "phpunit/phpunit": "^8.0"

config/app.php

@@ -13,7 +13,7 @@ return [
     |
     */
 
-    'name' => env('APP_NAME', 'Laravel'),
+    'name' => env('APP_NAME', 'Microsoft API'),
 
     /*
     |--------------------------------------------------------------------------
@@ -26,7 +26,7 @@ return [
     |
     */
 
-    'env' => env('APP_ENV', 'production'),
+    'env' => env('APP_ENV', 'local'),
 
     /*
     |--------------------------------------------------------------------------
@@ -39,7 +39,7 @@ return [
     |
     */
 
-    'debug' => env('APP_DEBUG', false),
+    'debug' => env('APP_DEBUG', true),
 
     /*
     |--------------------------------------------------------------------------

package.json

@@ -11,11 +11,16 @@
     },
     "devDependencies": {
         "axios": "^0.19",
-        "cross-env": "^5.1",
+        "bootstrap": "^4.0.0",
+        "cross-env": "^5.2.1",
+        "jquery": "^3.2",
         "laravel-mix": "^4.0.7",
         "lodash": "^4.17.13",
+        "popper.js": "^1.12",
         "resolve-url-loader": "^2.3.1",
-        "sass": "^1.15.2",
-        "sass-loader": "^7.1.0"
+        "sass": "^1.20.1",
+        "sass-loader": "7.*",
+        "vue": "^2.5.17",
+        "vue-template-compiler": "^2.6.10"
     }
 }

public/mix-manifest.json

+{
+    "/js/app.js": "/js/app.js",
+    "/css/app.css": "/css/app.css"
+}

resources/js/app.js

+/**
+ * First we will load all of this project's JavaScript dependencies which
+ * includes Vue and other libraries. It is a great starting point when
+ * building robust, powerful web applications using Vue and Laravel.
+ */
+
 require('./bootstrap');
+
+window.Vue = require('vue');
+
+/**
+ * The following block of code may be used to automatically register your
+ * Vue components. It will recursively scan this directory for the Vue
+ * components and automatically register them with their "basename".
+ *
+ * Eg. ./components/ExampleComponent.vue -> <example-component></example-component>
+ */
+
+// const files = require.context('./', true, /\.vue$/i)
+// files.keys().map(key => Vue.component(key.split('/').pop().split('.')[0], files(key).default))
+
+Vue.component('example-component', require('./components/ExampleComponent.vue').default);
+
+/**
+ * Next, we will create a fresh Vue application instance and attach it to
+ * the page. Then, you may begin adding components to this application
+ * or customize the JavaScript scaffolding to fit your unique needs.
+ */
+
+const app = new Vue({
+    el: '#app',
+});

resources/js/bootstrap.js

 window._ = require('lodash');
 
+/**
+ * We'll load jQuery and the Bootstrap jQuery plugin which provides support
+ * for JavaScript based Bootstrap features such as modals and tabs. This
+ * code may be modified to fit the specific needs of your application.
+ */
+
+try {
+    window.Popper = require('popper.js').default;
+    window.$ = window.jQuery = require('jquery');
+
+    require('bootstrap');
+} catch (e) {}
+
 /**
  * We'll load the axios HTTP library which allows us to easily issue requests
  * to our Laravel back-end. This library automatically handles sending the
@@ -24,5 +37,5 @@ window.axios.defaults.headers.common['X-Requested-With'] = 'XMLHttpRequest';
 //     broadcaster: 'pusher',
 //     key: process.env.MIX_PUSHER_APP_KEY,
 //     cluster: process.env.MIX_PUSHER_APP_CLUSTER,
-//     forceTLS: true
+//     encrypted: true
 // });

resources/js/components/ExampleComponent.vue

+<template>
+    <div class="container">
+        <div class="row justify-content-center">
+            <div class="col-md-8">
+                <div class="card">
+                    <div class="card-header">Example Component</div>
+
+                    <div class="card-body">
+                        I'm an example component.
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+</template>
+
+<script>
+    export default {
+        mounted() {
+            console.log('Component mounted.')
+        }
+    }
+</script>

resources/sass/_variables.scss

+// Body
+$body-bg: #f8fafc;
+
+// Typography
+$font-family-sans-serif: 'Nunito', sans-serif;
+$font-size-base: 0.9rem;
+$line-height-base: 1.6;
+
+// Colors
+$blue: #3490dc;
+$indigo: #6574cd;
+$purple: #9561e2;
+$pink: #f66d9b;
+$red: #e3342f;
+$orange: #f6993f;
+$yellow: #ffed4a;
+$green: #38c172;
+$teal: #4dc0b5;
+$cyan: #6cb2eb;

resources/sass/app.scss

-//
+// Fonts
+@import url('https://fonts.googleapis.com/css?family=Nunito');
+
+// Variables
+@import 'variables';
+
+// Bootstrap
+@import '~bootstrap/scss/bootstrap';

resources/views/auth/login.blade.php

+@extends('layouts.app')
+
+@section('content')
+<div class="container">
+    <div class="row justify-content-center">
+        <div class="col-md-8">
+            <div class="card">
+                <div class="card-header">{{ __('Login') }}</div>
+
+                <div class="card-body">
+                  @if(isset($userName))
+                    <h4>Welcome {{ $userName }}!</h4>
+                    <p>Use the navigation bar at the top of the page to get started.</p>
+                  @else
+                    <center><a href="{{ route('microsoft.auth') }}" class="btn btn-primary btn-large"><i class="fab fa-microsoft"></i> Click here to sign in</a></center>
+                  @endif
+                </div>
+            </div>
+        </div>
+    </div>
+</div>
+@endsection

resources/views/auth/passwords/confirm.blade.php

+@extends('layouts.app')
+
+@section('content')
+<div class="container">
+    <div class="row justify-content-center">
+        <div class="col-md-8">
+            <div class="card">
+                <div class="card-header">{{ __('Confirm Password') }}</div>
+
+                <div class="card-body">
+                    {{ __('Please confirm your password before continuing.') }}
+
+                    <form method="POST" action="{{ route('password.confirm') }}">
+                        @csrf
+
+                        <div class="form-group row">
+                            <label for="password" class="col-md-4 col-form-label text-md-right">{{ __('Password') }}</label>
+
+                            <div class="col-md-6">
+                                <input id="password" type="password" class="form-control @error('password') is-invalid @enderror" name="password" required autocomplete="current-password">
+
+                                @error('password')
+                                    <span class="invalid-feedback" role="alert">
+                                        <strong>{{ $message }}</strong>
+                                    </span>
+                                @enderror
+                            </div>
+                        </div>
+
+                        <div class="form-group row mb-0">
+                            <div class="col-md-8 offset-md-4">
+                                <button type="submit" class="btn btn-primary">
+                                    {{ __('Confirm Password') }}
+                                </button>
+
+                                @if (Route::has('password.request'))
+                                    <a class="btn btn-link" href="{{ route('password.request') }}">
+                                        {{ __('Forgot Your Password?') }}
+                                    </a>
+                                @endif
+                            </div>
+                        </div>
+                    </form>
+                </div>
+            </div>
+        </div>
+    </div>
+</div>
+@endsection

resources/views/auth/passwords/email.blade.php

+@extends('layouts.app')
+
+@section('content')
+<div class="container">
+    <div class="row justify-content-center">
+        <div class="col-md-8">
+            <div class="card">
+                <div class="card-header">{{ __('Reset Password') }}</div>
+
+                <div class="card-body">
+                    @if (session('status'))
+                        <div class="alert alert-success" role="alert">
+                            {{ session('status') }}
+                        </div>
+                    @endif
+
+                    <form method="POST" action="{{ route('password.email') }}">
+                        @csrf
+
+                        <div class="form-group row">
+                            <label for="email" class="col-md-4 col-form-label text-md-right">{{ __('E-Mail Address') }}</label>
+
+                            <div class="col-md-6">
+                                <input id="email" type="email" class="form-control @error('email') is-invalid @enderror" name="email" value="{{ old('email') }}" required autocomplete="email" autofocus>
+
+                                @error('email')
+                                    <span class="invalid-feedback" role="alert">
+                                        <strong>{{ $message }}</strong>
+                                    </span>
+                                @enderror
+                            </div>
+                        </div>
+
+                        <div class="form-group row mb-0">
+                            <div class="col-md-6 offset-md-4">
+                                <button type="submit" class="btn btn-primary">
+                                    {{ __('Send Password Reset Link') }}
+                                </button>
+                            </div>
+                        </div>
+                    </form>
+                </div>
+            </div>
+        </div>
+    </div>
+</div>
+@endsection

resources/views/auth/passwords/reset.blade.php

+@extends('layouts.app')
+
+@section('content')
+<div class="container">
+    <div class="row justify-content-center">
+        <div class="col-md-8">
+            <div class="card">
+                <div class="card-header">{{ __('Reset Password') }}</div>
+
+                <div class="card-body">
+                    <form method="POST" action="{{ route('password.update') }}">
+                        @csrf
+
+                        <input type="hidden" name="token" value="{{ $token }}">
+
+                        <div class="form-group row">
+                            <label for="email" class="col-md-4 col-form-label text-md-right">{{ __('E-Mail Address') }}</label>
+
+                            <div class="col-md-6">
+                                <input id="email" type="email" class="form-control @error('email') is-invalid @enderror" name="email" value="{{ $email ?? old('email') }}" required autocomplete="email" autofocus>
+
+                                @error('email')
+                                    <span class="invalid-feedback" role="alert">
+                                        <strong>{{ $message }}</strong>
+                                    </span>
+                                @enderror
+                            </div>
+                        </div>
+
+                        <div class="form-group row">
+                            <label for="password" class="col-md-4 col-form-label text-md-right">{{ __('Password') }}</label>
+
+                            <div class="col-md-6">
+                                <input id="password" type="password" class="form-control @error('password') is-invalid @enderror" name="password" required autocomplete="new-password">
+
+                                @error('password')
+                                    <span class="invalid-feedback" role="alert">
+                                        <strong>{{ $message }}</strong>
+                                    </span>
+                                @enderror
+                            </div>
+                        </div>
+
+                        <div class="form-group row">
+                            <label for="password-confirm" class="col-md-4 col-form-label text-md-right">{{ __('Confirm Password') }}</label>
+
+                            <div class="col-md-6">
+                                <input id="password-confirm" type="password" class="form-control" name="password_confirmation" required autocomplete="new-password">
+                            </div>
+                        </div>
+
+                        <div class="form-group row mb-0">
+                            <div class="col-md-6 offset-md-4">
+                                <button type="submit" class="btn btn-primary">
+                                    {{ __('Reset Password') }}
+                                </button>
+                            </div>
+                        </div>
+                    </form>
+                </div>
+            </div>
+        </div>
+    </div>
+</div>
+@endsection

resources/views/auth/register.blade.php

+@extends('layouts.app')
+
+@section('content')
+<div class="container">
+    <div class="row justify-content-center">
+        <div class="col-md-8">
+            <div class="card">
+                <div class="card-header">{{ __('Register') }}</div>
+
+                <div class="card-body">
+                    <form method="POST" action="{{ route('register') }}">
+                        @csrf
+
+                        <div class="form-group row">
+                            <label for="name" class="col-md-4 col-form-label text-md-right">{{ __('Name') }}</label>
+
+                            <div class="col-md-6">
+                                <input id="name" type="text" class="form-control @error('name') is-invalid @enderror" name="name" value="{{ old('name') }}" required autocomplete="name" autofocus>
+
+                                @error('name')
+                                    <span class="invalid-feedback" role="alert">
+                                        <strong>{{ $message }}</strong>
+                                    </span>
+                                @enderror
+                            </div>
+                        </div>
+
+                        <div class="form-group row">
+                            <label for="email" class="col-md-4 col-form-label text-md-right">{{ __('E-Mail Address') }}</label>
+
+                            <div class="col-md-6">
+                                <input id="email" type="email" class="form-control @error('email') is-invalid @enderror" name="email" value="{{ old('email') }}" required autocomplete="email">
+
+                                @error('email')
+                                    <span class="invalid-feedback" role="alert">
+                                        <strong>{{ $message }}</strong>
+                                    </span>
+                                @enderror
+                            </div>
+                        </div>
+
+                        <div class="form-group row">
+                            <label for="password" class="col-md-4 col-form-label text-md-right">{{ __('Password') }}</label>
+
+                            <div class="col-md-6">
+                                <input id="password" type="password" class="form-control @error('password') is-invalid @enderror" name="password" required autocomplete="new-password">
+
+                                @error('password')
+                                    <span class="invalid-feedback" role="alert">
+                                        <strong>{{ $message }}</strong>
+                                    </span>
+                                @enderror
+                            </div>
+                        </div>
+
+                        <div class="form-group row">
+                            <label for="password-confirm" class="col-md-4 col-form-label text-md-right">{{ __('Confirm Password') }}</label>
+
+                            <div class="col-md-6">
+                                <input id="password-confirm" type="password" class="form-control" name="password_confirmation" required autocomplete="new-password">
+                            </div>
+                        </div>
+
+                        <div class="form-group row mb-0">
+                            <div class="col-md-6 offset-md-4">
+                                <button type="submit" class="btn btn-primary">
+                                    {{ __('Register') }}
+                                </button>
+                            </div>
+                        </div>
+                    </form>
+                </div>
+            </div>
+        </div>
+    </div>
+</div>
+@endsection

resources/views/auth/verify.blade.php

+@extends('layouts.app')
+
+@section('content')
+<div class="container">
+    <div class="row justify-content-center">
+        <div class="col-md-8">
+            <div class="card">
+                <div class="card-header">{{ __('Verify Your Email Address') }}</div>
+
+                <div class="card-body">
+                    @if (session('resent'))
+                        <div class="alert alert-success" role="alert">
+                            {{ __('A fresh verification link has been sent to your email address.') }}
+                        </div>
+                    @endif
+
+                    {{ __('Before proceeding, please check your email for a verification link.') }}
+                    {{ __('If you did not receive the email') }},
+                    <form class="d-inline" method="POST" action="{{ route('verification.resend') }}">
+                        @csrf
+                        <button type="submit" class="btn btn-link p-0 m-0 align-baseline">{{ __('click here to request another') }}</button>.
+                    </form>
+                </div>
+            </div>
+        </div>
+    </div>
+</div>
+@endsection

resources/views/home.blade.php

+@extends('layouts.app')
+
+@section('content')
+<div class="container">
+    <div class="row justify-content-center">
+        <div class="col-md-8">
+            <div class="card">
+                <div class="card-header">Dashboard</div>
+
+                <div class="card-body">
+                    @if (Session::has('userName'))
+                        {{Session::get('userName')}} You are logged in!
+                    @endif
+                </div>
+                {{dd(Session::all())}}
+            </div>
+        </div>
+    </div>
+</div>
+@endsection

resources/views/layouts/app.blade.php

+<!doctype html>
+<html lang="{{ str_replace('_', '-', app()->getLocale()) }}">
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+
+    <!-- CSRF Token -->
+    <meta name="csrf-token" content="{{ csrf_token() }}">
+
+    <title>{{ config('app.name', 'Microsoft API') }}</title>
+
+    <!-- Scripts -->
+    <script src="{{ asset('js/app.js') }}" defer></script>
+    <script src="https://kit.fontawesome.com/3708ece496.js" crossorigin="anonymous"></script>
+    <!-- Fonts -->
+    <link rel="dns-prefetch" href="//fonts.gstatic.com">
+    <link href="https://fonts.googleapis.com/css?family=Nunito" rel="stylesheet">
+
+    <!-- Styles -->
+    <link href="{{ asset('css/app.css') }}" rel="stylesheet">
+</head>
+<body>
+    <div id="app">
+        <nav class="navbar navbar-expand-md navbar-light bg-white shadow-sm">
+            <div class="container">
+                <a class="navbar-brand" href="{{ url('/') }}">
+                    Microsoft API
+                </a>
+                <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent" aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="{{ __('Toggle navigation') }}">
+                    <span class="navbar-toggler-icon"></span>
+                </button>
+
+                <div class="collapse navbar-collapse" id="navbarSupportedContent">
+                    <!-- Left Side Of Navbar -->
+                    <ul class="navbar-nav mr-auto">
+
+                    </ul>
+
+                    <!-- Right Side Of Navbar -->
+                    <ul class="navbar-nav ml-auto">
+                        <!-- Authentication Links -->
+                        @if(Session::has('userName'))
+                            <li class="nav-item dropdown">
+                                <a id="navbarDropdown" class="nav-link dropdown-toggle" href="#" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false" v-pre>
+                                    {{ Session::get('userName') }} <span class="caret"></span>
+                                </a>
+
+                                <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdown">
+                                    <a class="dropdown-item" href="{{ route('microsoft.auth.signout') }}">
+                                        {{ __('Logout') }}
+                                    </a>
+                                </div>
+                            </li>
+                            
+                        @else
+                            <li class="nav-item">
+                                <a class="nav-link" href="{{ route('microsoft.auth') }}">{{ __('Login') }}</a>
+                            </li>
+                        @endif
+                    </ul>
+                </div>
+            </div>
+        </nav>
+
+        <main class="py-4">
+            @yield('content')
+        </main>
+    </div>
+</body>
+</html>

resources/views/users.blade.php

+@extends('layouts.app')
+
+@section('content')
+<div class="container">
+    <div class="row justify-content-center">
+        <div class="col-md-12">
+            <div class="card">
+              <h1>Users</h1>
+              <table class="table">
+                <thead>
+                  <tr>
+                    <th scope="col">Name</th>
+                    <th scope="col">Email</th>
+                  </tr>
+                </thead>
+                <tbody>
+                  @isset($users)
+                    @foreach($userObjects as $user)
+                      <tr>
+                        <td>{{$user->displayName}}</td>
+                        <td>{{$user->userPrincipalName}}</td>
+                      </tr>
+                    @endforeach
+                  @endif
+                </tbody>
+              </table>
+            </div>
+        </div>
+    </div>
+</div>
+
+@endsection

routes/web.php

@@ -10,7 +10,18 @@
 | contains the "web" middleware group. Now create something great!
 |
 */
-
 Route::get('/', function () {
-    return view('welcome');
+    return view('auth.login');
 });
+
+Route::get('/signin', 'OfficeApiController@signin')->name('microsoft.auth');
+Route::get('/signout', 'OfficeApiController@signout')->name('microsoft.auth.signout');
+Route::get('/callback', 'OfficeApiController@callback');
+
+// Route::get('/calendar', 'CalendarController@calendar');
+Route::get('/users', 'ApiUserController@index');
+Route::get('/home', 'HomeController@index')->name('home');
+
+Auth::routes();
+
+

webpack.mix.js

@@ -12,4 +12,4 @@ const mix = require('laravel-mix');
  */
 
 mix.js('resources/js/app.js', 'public/js')
-    .sass('resources/sass/app.scss', 'public/css');
+   .sass('resources/sass/app.scss', 'public/css');