Is the library stil active? How does it compare to openid_client

[adrian-moisa]

Hello dear maintainers! I've been doing for the past 2 weeks a lot of research to get up to speed with Oauth2 and OIDC in Flutter. I've looked at around 10 different libs including this one. So far the only contenders that are left on my list are openidconnect_flutter and openid_client. Both seem to be quite focused on OIDC and I'm very interested in this protocol. I've looked at the source code in both of them and I can see some diferences in approach. Tough I don't have quite a well trained eyed in matters of auth. I'd like to receive your guidance and advice regarding reasons I should chose openidconnect_flutter. So far I'm a bit worried by the low adoption and apparent lack of major activity on the repo. Can you give a hint what are your long term plans? Any advice will be much appreciated.

Myself I'm interested in implementing an OIDC authorization flow for multiple platforms, with the expectation that in the near future I will be implementing social login and potentially even including a 3rd party extensions marketplace where other devs can register extensions in the platform that I'm building. Hope to hear some feedback from you. Regards!

[ahmednfwela]

Hi @adrian-moisa! We have contacted the author of this library before to let us maintain the package, but our opinions aren't the same for which path the library should take (also it seems he is very busy, since the version on github hasn't been released).

that's why we are currently working on a new package oidc.

the new package is going to offer support for all platforms (web, android, ios, windows, linux, macos), and we might even request openid certification, but we might need donations for it (it costs 3500+ USD).

we started working on this last week, and the authorization code flow should be ready tomorrow for most platforms (except windows, linux)😄

we also reserved the name on pub.dev

[ahmednfwela]

related discussions:
#33
#32

[adrian-moisa]

I'd be interested to get in touch with you, to learn a bit more. For now, straight out of the gate I can say I'm super apprehensive to use a new lib in a project that is soon to hit production. I might even be willing to join forces with you since I'm highly interested to specialise in oauth and oidc, but for now consider me a dead weight. I still have a lot of catchup to do and I'm also overcommited in other tasks. Already maintainer for a rich text editor (fork from Quill). I'm over 300 online auth tutorials in. Trying to piece everything together. Still dozens of open questions. I'd be interested to hear more from you.

[ahmednfwela]

Sure! I would be happy to get in touch on discord ahmednfwela
also even though the package is new, it's based on already existing implementations
android/ios/macos: we internally use https://appauth.io/ ported via https://pub.dev/packages/flutter_appauth
web: we use url_launcher mostly
windows/linux/cli: still WIP, since we will most likely have to start a webserver ourselves using shelf or something similar.

[ahmednfwela]

Please see the announcement.