LinusU / LinusU/flutter_web_auth
No way to keep the browser open for nested SSO with authenticator app
Nobody has claimed this yet.
- Dominant language
- Dart
- Stars
- 213
- Forks
- 261
- PR merge metrics
- No merged PRs in 30d
Description
Flow:
1. The Flutter app opens the IDP authenticate url in a Chrome Custom Tab.
2. The user presses the one tap login button which opens the authenticator app (using a custom scheme) where the user approves the sign in request
3. The authenticator app calls the Flutter app's callback scheme
4. The IDP page inside the Chrome Custom Tab activity checks periodically whether the login is approved to execute a callback with the 'code' parameter
Request: The in app browser activity should remain open within (on top of?) the Flutter app not only until the app receives **any** callback, but until a specific parameter (code) is present in the callback.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the Flutter plugin's handling of the Chrome Custom Tab lifecycle and callback scheme described in the issue. Check how it currently decides that authentication is complete, then verify that the browser remains open through the authenticator-app round trip and closes only when the callback contains the `code` parameter.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- dart, flutter
- Domain
- authentication, mobile
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100