158 - Exchanging Tokens

app/Http/Controllers/Backstage/StripeConnectController.php

@@ -2,8 +2,10 @@
 
 namespace App\Http\Controllers\Backstage;
 
+use Zttp\Zttp;
 use Illuminate\Http\Request;
 use App\Http\Controllers\Controller;
+use Illuminate\Support\Facades\Auth;
 
 class StripeConnectController extends Controller
 {
@@ -20,4 +22,20 @@ class StripeConnectController extends Controller
 
         return redirect($url);
     }
+
+    public function redirect()
+    {
+        $accessTokenResponse = Zttp::asFormParams()->post('https://connect.stripe.com/oauth/token', [
+            'grant_type' => 'authorization_code',
+            'code' => request('code'),
+            'client_secret' => config('services.stripe.secret'),
+        ])->json();
+
+        Auth::user()->update([
+            'stripe_account_id' => $accessTokenResponse['stripe_user_id'],
+            'stripe_access_token' => $accessTokenResponse['access_token'],
+        ]);
+
+        return redirect()->route('backstage.concerts.index');
+    }
 }

app/User.php

@@ -9,23 +9,7 @@ class User extends Authenticatable
 {
     use Notifiable;
 
-    /**
-     * The attributes that are mass assignable.
-     *
-     * @var array
-     */
-    protected $fillable = [
-        'name', 'email', 'password',
-    ];
-
-    /**
-     * The attributes that should be hidden for arrays.
-     *
-     * @var array
-     */
-    protected $hidden = [
-        'password', 'remember_token',
-    ];
+    protected $guarded = [];
 
     public function concerts()
     {