[question / tutorial] using the plugin for Flutter WEB

[fvisticot]

Hello,
I have discovered this plugin and I have a few questions:

1. Can you please confirm that this plugin is working with Flutter WEB ?
2. Can you please document / make a tuto explaining how to use the plugin

• My Flutter WEB app is available on the domain : https://my-app.com
• My Authentication oAuth server is https://my-oauth-server.com

Can you please explain what is required for the

• redirectUri: ?
• silentRedirectUri: ?

Tx for your help

[fvisticot]

I have made some tests and it seems i get some redirection errors:
══╡ EXCEPTION CAUGHT BY FLUTTER FRAMEWORK ╞═════════════════════════════════════════════════════════ The following message was thrown: Could not navigate to initial route. The requested route name was: "/access_token=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9

[jolleekin]

Init

SilentAuth tries to load the access token (and other data) stored in the storage object passed to the constructor (localStorage by default).

If the access token is still valid, SilentAuth will schedule a renewal; otherwise, it checks if an access token is available in the URL fragment and uses it (this happens after user gets redirected back to the app after logging into the identity server).

Login

SilentAuth redirects user to the identity server's authorize endpoint with query parameter redirect_uri set to redirectUri. This is the URI of your application.

After user logs in, the identity server will redirect user to the provided redirect URI.

SilentAuth will then extract the access token from window.location.hash

The application can now use the access token and make API requests.

Renewal

SilentAuth uses a hidden iframe to access the identity server's authorize endpoint with query parameter redirect_uri set to silentRedirectUri. silentRedirectUri must have the same origin as redirecUri. Usually, this points to a dummy HTML file (http://localhost:12345/silent_auth.html, for example).

If user's session on the identity server is still active, the identity server will redirect the hidden iframe to the provided redirect URI, passing the new access token.

SilentAuth will then access the iframe and extract the access token from the iframe's window.location.hash.

Then it will schedule the next renewal.

[jolleekin]

I never used it with flutter web, so I don't know if it works. In order for it to work, SilentAuth must process the URL before flutter.