sso library

Classes

SsoAccountInfo: An SSO account this install offers, from AppstraxAuth.getSsoAccounts.
SsoCallbackError: Sign-in failed before the app regained control.
SsoCallbackExchange: Sign-in produced a one-time code to exchange for tokens.
SsoCallbackNone: No SSO parameters were present at all.
SsoCallbackOutcome: What the query parameters on an SSO callback URL turned out to mean.
SsoDiscovery: What AppstraxAuth.discoverSso found out about an address.
SsoLinkDto: Request body for POST /api/auth/oauth/link.
SsoLoginOptions: Optional settings for SSO sign-in.
SsoProviderInfo: A provider as reported by GET /api/auth/oauth/providers.

ssoCallbackPath → const String: Path, relative to the API URL, that the Appstrax API serves for native apps.
ssoLinkRequiredStatus → const String: Status the API reports when the Google account's email already belongs to a password account, so the user has to prove ownership before it is linked.

defaultSsoRedirectUri(String apiUrl) → String: The default return URL for SSO: {apiUrl}/sso-callback.
parseSsoAccounts(dynamic json) → List<SsoAccountInfo>: Reads the body of GET /api/auth/oauth/accounts.
parseSsoProviders(dynamic json) → List<SsoProviderInfo>: Reads the body of GET /api/auth/oauth/providers.
resolveSsoCallbackParams({String? code, String? status, String? error}) → SsoCallbackOutcome: Interprets the query parameters the API redirects back with.
ssoRequiredFrom(Object error) → SsoRequiredException?: Turns an "SSO required" rejection into a typed exception, or returns null.
validateAuthorizationUrl(dynamic authorizationUrl) → String: Checks the URL the API told us to open before it is handed to the system browser.
validateSsoRedirectUri(String redirectUri) → void: Rejects redirect URIs the API would refuse, so a misconfigured app fails with a clear message here instead of an opaque error from the server.