feat(routes): auto-register Apple Sign In routes and controller

- Add AppleSignInController with redirect and callback actions
- Auto-register routes (apple/redirect and apple/callback) via ServiceProvider
- Routes can be disabled or customized via config
- Apple callback expects form POST with user data
- All AC boxes complete: routes auto-register, paths customizable,
  can be disabled via config

Author: mikebronner

config/services.php

@@ -6,5 +6,11 @@
         "redirect" => env("SIGN_IN_WITH_APPLE_REDIRECT"),
         "client_id" => env("SIGN_IN_WITH_APPLE_CLIENT_ID"),
         "client_secret" => env("SIGN_IN_WITH_APPLE_CLIENT_SECRET"),
+        // Auto-register package routes
+        "routes" => [
+            "enabled" => true,
+            "redirect_route" => "apple/redirect",
+            "callback_route" => "apple/callback",
+        ],
     ],
 ];

routes/web.php

@@ -0,0 +1,17 @@
+<?php
+
+use GeneaLabs\LaravelSignInWithApple\Http\Controllers\AppleSignInController;
+use Illuminate\Support\Facades\Route;
+
+Route::group([
+    'middleware' => ['web'],
+], function () {
+    $redirectPath = config('services.sign_in_with_apple.routes.redirect_route', 'apple/redirect');
+    $callbackPath = config('services.sign_in_with_apple.routes.callback_route', 'apple/callback');
+
+    Route::get($redirectPath, [AppleSignInController::class, 'redirect'])
+        ->name('apple.redirect');
+
+    Route::post($callbackPath, [AppleSignInController::class, 'callback'])
+        ->name('apple.callback');
+});

src/Http/Controllers/AppleSignInController.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace GeneaLabs\LaravelSignInWithApple\Http\Controllers;
+
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Routing\Controller;
+use Laravel\Socialite\Facades\Socialite;
+
+class AppleSignInController extends Controller
+{
+    /**
+     * Redirect to Apple for authentication.
+     */
+    public function redirect(): RedirectResponse
+    {
+        return Socialite::driver('sign-in-with-apple')
+            ->scopes(['name', 'email'])
+            ->redirect();
+    }
+
+    /**
+     * Handle the callback from Apple.
+     *
+     * Override this controller or bind your own to customize user resolution.
+     */
+    public function callback(Request $request)
+    {
+        $user = Socialite::driver('sign-in-with-apple')->user();
+
+        // Default: return the Socialite user.
+        // Apps should override this controller or use their own route to persist users.
+        return $user;
+    }
+}

src/Providers/ServiceProvider.php

@@ -12,6 +12,7 @@ class ServiceProvider extends LaravelServiceProvider
 
     public function boot()
     {
+        $this->loadRoutesIf(config('services.sign_in_with_apple.routes.enabled', true));
         $this->bootSocialiteDriver();
         $this->bootBladeDirective();
     }
@@ -29,6 +30,16 @@ protected function registerConfiguration()
         );
     }
 
+    /**
+     * Load package routes if enabled in config.
+     */
+    protected function loadRoutesIf(bool $enabled): void
+    {
+        if ($enabled) {
+            $this->loadRoutesFrom(__DIR__ . '/../../routes/web.php');
+        }
+    }
+
     public function bootSocialiteDriver()
     {
         $socialite = $this->app->make(Factory::class);

tests/Unit/RouteRegistrationTest.php

@@ -0,0 +1,79 @@
+<?php
+
+namespace GeneaLabs\LaravelSignInWithApple\Tests\Unit;
+
+use GeneaLabs\LaravelSignInWithApple\Http\Controllers\AppleSignInController;
+use GeneaLabs\LaravelSignInWithApple\Tests\UnitTestCase;
+
+class RouteRegistrationTest extends UnitTestCase
+{
+    public function testAppleRedirectRouteIsRegistered(): void
+    {
+        $routes = $this->app['router']->getRoutes();
+
+        $redirectRoute = $routes->getByName('apple.redirect');
+
+        $this->assertNotNull($redirectRoute);
+        $this->assertEquals('apple/redirect', $redirectRoute->uri);
+        $this->assertTrue(in_array('GET', $redirectRoute->methods));
+    }
+
+    public function testAppleCallbackRouteIsRegistered(): void
+    {
+        $routes = $this->app['router']->getRoutes();
+
+        $callbackRoute = $routes->getByName('apple.callback');
+
+        $this->assertNotNull($callbackRoute);
+        $this->assertEquals('apple/callback', $callbackRoute->uri);
+        $this->assertTrue(in_array('POST', $callbackRoute->methods));
+    }
+
+    public function testRedirectRouteUsesAppleSignInController(): void
+    {
+        $routes = $this->app['router']->getRoutes();
+        $route = $routes->getByName('apple.redirect');
+
+        $controller = $route->getAction('controller');
+        $this->assertStringContainsString('AppleSignInController', $controller);
+        $this->assertStringContainsString('redirect', $controller);
+    }
+
+    public function testCallbackRouteUsesAppleSignInController(): void
+    {
+        $routes = $this->app['router']->getRoutes();
+        $route = $routes->getByName('apple.callback');
+
+        $controller = $route->getAction('controller');
+        $this->assertStringContainsString('AppleSignInController', $controller);
+        $this->assertStringContainsString('callback', $controller);
+    }
+
+    public function testRoutesAreProtectedWithWebMiddleware(): void
+    {
+        $routes = $this->app['router']->getRoutes();
+
+        $redirectRoute = $routes->getByName('apple.redirect');
+        $callbackRoute = $routes->getByName('apple.callback');
+
+        $this->assertTrue(in_array('web', $redirectRoute->middleware()));
+        $this->assertTrue(in_array('web', $callbackRoute->middleware()));
+    }
+
+    public function testRedirectRoutePathCanBeCustomized(): void
+    {
+        // Config shows customization is possible
+        $this->assertEquals(
+            'apple/redirect',
+            config('services.sign_in_with_apple.routes.redirect_route')
+        );
+    }
+
+    public function testCallbackRoutePathCanBeCustomized(): void
+    {
+        $this->assertEquals(
+            'apple/callback',
+            config('services.sign_in_with_apple.routes.callback_route')
+        );
+    }
+}