Extend OAuth2 package to support OpenID connect

[DartBot]

Originally opened as dart-lang/sdk#15248

This issue was originally filed by warren.strange...@gmail.com

---

After thinking this through, I realize this is a fairly major feature request.

The current OAuth2 package (http://pub.dartlang.org/packages/oauth2)

does not support OpenID connect. For example, Openid connect returns a id_token as part of the authorization flow.

A small enhancement would be to extend Credentials.dart to provide the raw value of id_token if it is present.

Ideally, support would be provided for JSON web tokens, signature verification, etc.

[DartBot]

<img src="https://avatars.githubusercontent.com/u/5449880?v=3" align="left" width="48" height="48"hspace="10"> Comment by iposva-google

---

Added Area-Pkg, Triaged labels.

[DartBot]

<img src="https://avatars.githubusercontent.com/u/5479?v=3" align="left" width="48" height="48"hspace="10"> Comment by sethladd

---

Removed Type-Defect, Priority-Unassigned labels.
Added Type-Enhancement, Priority-Low, Pkg-oauth2 labels.

[DartBot]

<img src="https://avatars.githubusercontent.com/u/188?v=3" align="left" width="48" height="48"hspace="10"> Comment by nex3

---

Warren, can you provide a link to the spec for the functionality you're describing?

---

Added NeedsInfo label.

[DartBot]

This comment was originally written by warren.stran...@gmail.com

---

OIDC spec? http://openid.net/specs/openid-connect-core-1_0.html

i.e. at a high level, how can we make a Dart client consume JWT tokens and participate in OIDC flows.

[nex3]

I'd look at a patch that added this, but it's not something I'm planning to add myself.

[Jeremywhiteley]

With Google Flutter starting to take off, why can't you add OpenID Connect? It's needed if you want developers to use Google Flutter. Every other mobile framework supports OpenID Connect. This is like buying a new Tesla, but it was delivered with out the batteries.

[nex3]

As I said, contributions here are welcome.

[Matt2012]

Any updates on this?