LinusU / LinusU/flutter_web_auth

No way to keep the browser open for nested SSO with authenticator app

Open
#73 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Dart
Stars
213
Forks
261
PR merge metrics
No merged PRs in 30d

Description

Flow:
1. The Flutter app opens the IDP authenticate url in a Chrome Custom Tab.
2. The user presses the one tap login button which opens the authenticator app (using a custom scheme) where the user approves the sign in request
3. The authenticator app calls the Flutter app's callback scheme
4. The IDP page inside the Chrome Custom Tab activity checks periodically whether the login is approved to execute a callback with the 'code' parameter

Request: The in app browser activity should remain open within (on top of?) the Flutter app not only until the app receives **any** callback, but until a specific parameter (code) is present in the callback.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the Flutter plugin's handling of the Chrome Custom Tab lifecycle and callback scheme described in the issue. Check how it currently decides that authentication is complete, then verify that the browser remains open through the authenticator-app round trip and closes only when the callback contains the `code` parameter.

Written by the indexing model from the issue text.

Assessment

Tech stack
dart, flutter
Domain
authentication, mobile
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.