I can get the reply with my url.

But hit error when clicking the Lookup button.

Error: Expected a value of type 'List', but got one of type 'Null' at Object.throw_ [as throw] (http://localhost:65418/dart_sdk.js:5041:11) at Object.castError (http://localhost:65418/dart_sdk.js:5014:15) at Object.cast [as as] (http://localhost:65418/dart_sdk.js:5323:17) at Function.as_C [as as] (http://localhost:65418/dart_sdk.js:4960:19) at Function.fromJson (http://localhost:65418/packages/openidconnect/openidconnect.dart.lib.js:1620:998) at getConfiguration (http://localhost:65418/packages/openidconnect/openidconnect.dart.lib.js:376:50) at getConfiguration.next () at http://localhost:65418/dart_sdk.js:37403:33 at _RootZone.runUnary (http://localhost:65418/dart_sdk.js:37274:59) at _FutureListener.thenAwait.handleValue (http://localhost:65418/dart_sdk.js:32530:29) at handleValueCallback (http://localhost:65418/dart_sdk.js:33057:49) at Function._propagateToListeners (http://localhost:65418/dart_sdk.js:33095:17) at _Future.new.[_completeWithValue] (http://localhost:65418/dart_sdk.js:32943:23) at async._AsyncCallbackEntry.new.callback (http://localhost:65418/dart_sdk.js:32964:35) at Object._microtaskLoop (http://localhost:65418/dart_sdk.js:37526:13) at _startMicrotaskLoop (http://localhost:65418/dart_sdk.js:37532:13) at http://localhost:65418/dart_sdk.js:33303:9

May I know what am I missing? Thanks.

Can this be used with OKTA.

I tried the PKCE flow with okta I get the below response for callback.html "The authentication request has an invalid 'state' parameter."

I'm looking to mock the OpenIdConnectClient so as not to make API calls in my tests, but I'm not currently able to do so

I can mock out the static method OpenIdConnectClient.create() by putting a wrapper around the class. However, the actual constructor has been made private, so a mockable instance of OpenIdConnectClient can't be created to be used in tests.

Currently this package does not work with Google (e.g. Google Workspace) as IdP for a web app, because accounts.google.com only supports the authorization code flow with PKCE for mobile clients (iOS and Android). If you create an OAuth-ClientId of type "Web-Application" and configure the plugin with:

final configuration = await OpenIdConnect.getConfiguration(
      '${request.issuer}/.well-known/openid-configuration',
);

final result = await OpenIdConnect.authorizeInteractive(
  context: request.context,
  title: "Login",
  request: await InteractiveAuthorizationRequest.create(
    clientId: clientId, // Client ID optained from google cloud console
    redirectUrl: 'https://example.com/callback', // URL of my flutter app
    scopes: request.scopes,
    configuration: configuration
  ),
);

The request fails with an error, that grant_type is an unsupported parameter. If I alter the code of this plugin to omit the grant_type parameter the, login screen is shown correctly but the code exchange on the token endpoint fails, because it expects a Client ID.

I place callback.html in the web folder and when I try to run in localhost after login user in the identity server(SSO) gets this error and the login goes incomplete.

Could not navigate to initial route. The requested route name was: "/callback.html?code=3FB8C2350B5BAB64BA451D1AB7DA3D6DC64972068FEB54D9A0F9F04236788603&scope=openid%20profile%20email%20roles%20offline_access&session_state=pnUxDeiG5WF-1Devzs7829Rwnf9ZxxjPvA-1okPvgBI.BDF625AA8B19E06D8D8FE69B0CEF6E5E" There was no corresponding route in the app, and therefore the initial route specified will be ignored and "/" will be used instead.

Not all Open Id Connect providers follow the standard up to 100%. When calling the discovery endpoint, our provider does not provide information about the "claims_supported". This leads to a null pointer exception. This pull request would fix the error by making the claims_supported optional.

It's not clear to me if this is using a user agent separate from the app on mobile. Is it using chrome tabs for example on Android, or using an in-app browser when communicating to the idp?

I'm working on authentication with Azure, on a web app. When I set the useWebPopup to false, the auth page opens normally to authenticate with Azure, but after the whole application is refreshed, and I still find myself on the authentication page.

I've tried with the example project provided in this package and I have the same behavior, after the authentication flow, I come back to the auth page instead of being redirected to the page with the user information ( token, username, etc...

[Starting point - 1]

[Select Interactive with use Web Popup disabled]

[o365 Auth Flow]

[I'm back to the step one]

Normally I should see the page with usage information as in the case with UseWebPopup is true.

How can I have the same behavior in Popup mode ? Thanks

In the authorize code method the identification & authorization is completed in one step which does not allow displaying the device code. Without the device code the user can not verify if the authentication is as intended (UX Issue). This commit creates two methods that split the authorizeCode method in two. This allows first getting the response with the device code and then going for the authentication afterwards.

Example usage

                 final codeResponse =
                        await OpenIdConnect.authorizeDeviceGetDeviceCodeResponse(request: request);

                   // dsplay the user device code
                    setState(() {
                      deviceIdentification = codeResponse.userCode;
                    });

                    final response =
                        await OpenIdConnect.authorizeDeviceCompleteDeviceCodeResponseRequest(
                      request: request,
                      codeResponse: codeResponse,
                    );

Names could probably be chosen better :-)