🚀 signly_google

A modern Google Sign‑In wrapper for Flutter using the latest SDK.

✨ Simple API
🔐 Secure token flows
📱 Mobile friendly
🧠 Backend ready

📦 What you get

Icon Token Purpose
🪪 idToken (JWT) Authenticate user on backend
🔁 serverAuthCode Exchange for refreshToken
🌐 accessToken Call Google APIs
👤 Profile Email, name, avatar

🏗 GCP SETUP

🪜 Step 1: OAuth Consent Screen

📍 Google Cloud Console → APIs & Services → OAuth Consent Screen

✔ App name
✔ Support email (User support)
✔ Audience
✔ Developer email (Contact info)

🤖 Step 2: Android OAuth Client

Type: Android
Provide: 📦 Package name
🔑 SHA‑1 fingerprint

✅ Used for handshake only
🚫 Not passed in Flutter code

🍎 Step 3: iOS OAuth Client

Type: iOS
Provide: 📦 Bundle ID

Add in ios/Runner/Info.plist

<key>GIDClientID</key>
<string>YOUR_CLIENT_ID.apps.googleusercontent.com</string>

<key>CFBundleURLTypes</key>
<array>
  <dict>
    <key>CFBundleURLSchemes</key>
    <array>
      <string>com.googleusercontent.apps.YOUR_CLIENT_ID</string>
    </array>
  </dict>
</array>

🔁 URL scheme returns user back to app after login

🌐 Step 4: Web OAuth Client (IMPORTANT)

Type: Web Application

🎯 This is your serverClientId

Used for: ✅ idToken audience
✅ serverAuthCode
✅ backend refresh flow

🔐 Token meanings

🪪 idToken

JWT signed by Google
Contains user identity

🌐 accessToken

Call Google APIs
⏳ Expires automatically

🔁 serverAuthCode

One‑time code
Backend → refreshToken + accessToken

📱 Flutter Usage

import 'package:signly_google/signly_google.dart';

final client = SignlyGoogleClient();

final result = await client.signIn(
     GoogleSignInRequest(
          clientId: ...
          serverClientId: ...
          scopes: ['email', 'profile'],
          requestedTokenType: GoogleRequestedTokenType.<token_type>,
);

Access values

result.requestedToken
result.requestedTokenType.name
result.userId
result.userData.email
result.userData.displayName
result.userData.photoUrl

🧠 Best Practice Flow

📱 Flutter → idToken + authCode
🖥 Backend → refreshToken
♻ Backend refreshes forever

🚫 Do NOT rely only on mobile accessToken

📄 License

MIT

Libraries

signly_google