flutter_appauth
This plugin provides an abstraction around the Android and iOS AppAuth SDKs so it can be used to communicate with OAuth 2.0 and OpenID Connect providers
12.0.2
357K downloads/mo
#618 most downloaded on pub.dev
MaikuB/flutter_appauth
What this package is like to depend on
Last release 1 months ago
26 Jun 2026
Ships fairly regularly
a new release about every 6 weeks
Most releases are documented
notes for 68 of 85 stable releases
1 version withdrawn
withdrawn after publishing
8 years old
104 releases · first in 2019
6 releases in the last 12 months
see the full history below
Release timeline
104 releases · Feb 2019 to Jun 2026Releases
latest 60 of 104-
12.0.226 Jun 2026 -
12.0.123 May 2026Release notes
Open source →- Removed assertion around tied to
idTokenHintandpostLogoutRedirectUrlparameters passed to theEndSessionRequestconstructor. This was done as both are optional according to the OIDC RP-initiated logout specification
- Removed assertion around tied to
-
12.0.003 Mar 2026Release notes
Open source →- Breaking change updated minimum supported SDK version to Flutter 3.38.1/Dart 3.10. Consequently the minimum OS requirements for each platform has been updated as well
- [Android] minimum Android version is now 7.0 (API level 24)
- [iOS] minimum iOS version is now 13
- [macOS] minimum macOS version is now 10.15
- Plugin and example app now adopt UISceneDelegate. Note that whilst migration required Flutter 3.38.0 as a minimum, I have set the minimum supported Flutter SDK version to 3.38.1. This was done as the Dart 3.10 SDK bundled with Flutter 3.38.0 was technically still a beta. The Dart 3.10 SDK bundled with Flutter 3.38.1 is considered stable
- Breaking change updated minimum supported SDK version to Flutter 3.38.1/Dart 3.10. Consequently the minimum OS requirements for each platform has been updated as well
-
12.0.0-dev.119 Feb 2026 pre-releaseRelease notes
Open source →- Breaking change updated minimum supported SDK version to Flutter 3.38.1/Dart 3.10. Consequently the minimum OS requirements for each platform has been updated as well
- [Android] minimum Android version is now 7.0 (API level 24)
- [iOS] minimum iOS version is now 13
- [macOS] minimum macOS version is now 10.15
- Plugin and example app now adopt UISceneDelegate. Note that whilst migration required Flutter 3.38.0 as a minimum, I have set the minimum supported Flutter SDK version to 3.38.1. This was done as the Dart 3.10 SDK bundled with Flutter 3.38.0 was technically still a beta. The Dart 3.10 SDK bundled with Flutter 3.38.1 is considered stable
- Breaking change updated minimum supported SDK version to Flutter 3.38.1/Dart 3.10. Consequently the minimum OS requirements for each platform has been updated as well
-
11.0.026 Oct 2025Release notes
Open source →- Added
Promptclass that exposes standardpromptstring values as defined in the OIDC specification. Thanks to the PR from Valentin Michalak - Potentiallu breaking change [Android] plugin will now throw a
PlatformExceptionwith anull_activityerror code when plugin runs into a scenario where the bound Flutter activity has been detached/disposed. Thanks to the PR from Sam Costa
- Added
-
10.0.013 Sep 2025Release notes
Open source →- Breaking change updated minimum supported SDK version to Flutter 3.29/Dart 3.7
- Bumped
flutter_lintsdev dependency - [Android] Breaking changes updated
compileSdkVersionto 35 and AGP to 8.6.0 - Updated Android setup section in readme with instructions for apps using Kotlin DSL. Thanks to the PR from LennartMart
-
9.0.125 May 2025Nothing published for this version
-
9.0.003 Mar 2025Nothing published for this version
-
9.0.0-dev.109 Feb 2025 pre-releaseNothing published for this version
-
8.0.312 Dec 2024Nothing published for this version
-
8.0.210 Dec 2024 withdrawnNothing published for this version
-
8.0.115 Nov 2024Nothing published for this version
-
8.0.024 Oct 2024Nothing published for this version
-
8.0.0+124 Oct 2024Nothing published for this version
-
8.0.0-dev.413 Oct 2024 pre-releaseNothing published for this version
-
8.0.0-dev.304 Oct 2024 pre-releaseNothing published for this version
-
8.0.0-dev.203 Oct 2024 pre-releaseNothing published for this version
-
8.0.0-dev.128 Sep 2024 pre-releaseNothing published for this version
-
7.0.104 Oct 2024Nothing published for this version
-
7.0.024 Aug 2024Nothing published for this version
-
7.0.0-dev.412 Aug 2024 pre-releaseNothing published for this version
-
7.0.0-dev.310 Aug 2024 pre-releaseNothing published for this version
-
7.0.0-dev.209 Aug 2024 pre-releaseNothing published for this version
-
7.0.0-dev.104 Aug 2024 pre-releaseNothing published for this version
-
6.0.710 Aug 2024Nothing published for this version
-
6.0.616 Apr 2024Nothing published for this version
-
6.0.511 Mar 2024Nothing published for this version
-
6.0.428 Jan 2024Nothing published for this version
-
6.0.320 Jan 2024Nothing published for this version
-
6.0.212 Aug 2023Nothing published for this version
-
6.0.2+120 Jan 2024Nothing published for this version
-
6.0.115 Jul 2023Nothing published for this version
-
6.0.012 May 2023Nothing published for this version
-
5.0.029 Apr 2023Release notes
Open source →- Breaking change Bumped minimum Flutter SDK version to 3.0.0 and Dart SDK version to 2.17
- [Android] removed references to v1 embedding
- [Android] updated
compileSdkVersionto 31 (Android 12) - [Android] bumped AGP (Android Gradle plugin) to 7.4.2
- [Android] conditionally adds a namespace for compatibility with AGP 8.0
- Note: it's quite likely that the AppAuth Android SDK itself requires this change going forward but this change will ensure that the
flutter_appauthplugin has done this change ahead of time
- Note: it's quite likely that the AppAuth Android SDK itself requires this change going forward but this change will ensure that the
- Applied following updates to the example app on the Android side
- Bumped AGP to 7.4.2 and Gradle 7.5
- Used namespace instead of package identifier since the latter has been deprecated (reference: https://developer.android.com/build/releases/past-releases/agp-7-3-0-release-notes#package-deprecated). Note that as of this writing, using the
flutter runcommand on the stable channel (i.e. Flutter version 3.7.1) to debug/run the app will in an error that says "package identifier or launch activity not found". However, an APK or app bundle can still be built and will run on a device. The Flutter team have already addressed this issue on the master channel that is currently on version 3.10.0-17.0.pre.21 so would expect the next stable release to contain the fix. Alternatively developers can manually restore the package identifier though this change was done to avoid issues from happening in the future
-
4.2.108 Oct 2022 -
4.2.1+105 Apr 2023Release notes
Open source →- Added comments to example app to explain how code challenge takes place per PKCE. Thanks to PR from Davide Ravasi
- Updated code for API docs to avoid lines longer than 80 characters
-
4.2.022 Jul 2022Release notes
Open source →- Added
preferEphemeralSessiontoEndSessionRequestThanks to the PR from Daniel Ziegler
- Added
-
4.1.014 Jul 2022Release notes
Open source →- Added ability to specify the
nonceas part of requests. Thanks to the PR from Tiernan
- Added ability to specify the
-
4.1.0+114 Jul 2022Release notes
Open source →- Added missing credit to 4.1.0 changelog entry
- Updated readme to remove Android setup step for setting
queriesinAndroidManifest.xmlas that is now handled directly with the AppAuth Android SDK
-
4.0.131 May 2022 -
4.0.019 May 2022 -
3.0.117 May 2022 -
3.0.017 May 2022Release notes
Open source →- Breaking change
AuthorizationResponse's constructor now includesnonceand has changed to take positional parameters noncecan now be specified forTokenRequestclass. This is especially useful on Android as the AppAuth Android SKD had turned on ID token validation that results in nonce mismatch errors. These errors should no longer appear when using thenoncevalue returned by theAuthorizationResponseobject after callingauthorize()and passing the value to theTokenRequestwhen calling thetoken()method- Bumped AppAuth Android SDK to 0.11.1 where the SDK reports that it has fixed an issue where rotating device could lead to the SDK reporting that the user cancelled login flow
- Breaking change
-
2.4.209 May 2022 -
2.4.127 Feb 2022Release notes
Open source →- [iOS] fixed issue with
scopesnot being sent correctly as they should've been space-delimited instead of comma-delimited. Thanks to the PR from Angle Wang
- [iOS] fixed issue with
-
2.4.1+101 May 2022Release notes
Open source →- Example app has been updated to point to the new demo IdentityServer instance
-
2.4.020 Feb 2022Release notes
Open source →- Added
scopesproperty toTokenResponseclass andAuthorizationTokenResponseclass that inherits from it. Thanks to PR from leoshusar - [Android] applied fix to a scenario where skipping https check on the issuer wasn't done for refreshing tokens. Thanks to the PR from Javier Puerto
- Added
-
2.3.008 Feb 2022Release notes
Open source →- [Android]
claimscan now be passed as part of theadditionalParametersincluded with requests without triggering an exception by the AppAuth Android SDK. Thanks to the PR from Garry Jeromson
- [Android]
-
2.2.015 Dec 2021Release notes
Open source →- [Android] updated error handling so more details are returned. Thanks to Andreas Kägi for originally starting on the PR
-
2.1.023 Nov 2021Release notes
Open source →- [Android]
ui_localescan now be passed as part of theadditionalParametersincluded with requests without triggering an exception by the AppAuth Android SDK. Thanks to the PR from dimitristoz
- [Android]
-
2.1.0+123 Nov 2021 -
2.0.017 Nov 2021Release notes
Open source →- Breaking change
AuthorizationServiceConfigurationconstructor has changed to take named parameters - Added
endSession()method,EndSessionRequestandEndSessionResponseclasses to support end session requests - [Android] skips https issuer check if
allowInsecureConnectionsis true. Thanks to the PR from Roman Fürst - Bumped AppAuth Android and iOS SDK dependencies
- Added FAQs section to readme to describe a common iOS issue with Azure B2C and Azure AD
- Breaking change
-
2.0.0-dev.610 Nov 2021 pre-releaseNothing published for this version
-
2.0.0-dev.525 Sep 2021 pre-releaseNothing published for this version
-
2.0.0-dev.421 Sep 2021 pre-releaseNothing published for this version
-
2.0.0-dev.304 Aug 2021 pre-releaseNothing published for this version
-
2.0.0-dev.210 Jul 2021 pre-releaseNothing published for this version
-
2.0.0-dev.129 Jun 2021 pre-releaseNothing published for this version
-
2.0.0-dev.027 Jun 2021 pre-releaseNothing published for this version
-
1.1.114 Nov 2021