flutter_secure_auth 0.1.7

A secure, lightweight authentication package for Flutter (REST + OAuth2 PKCE + token refresh) with secure local storage.

0.1.7

• Upgraded testing and code generation dependencies (json_serializable, build_runner, mockito) to their latest compatible versions.
• Validated package stability and analysis compliance under upgraded dependency constraints.

---

0.1.6

• Upgraded dependencies to latest versions (flutter_secure_storage to ^10.3.1, etc.).
• Fully resolved pub.dev WebAssembly (WASM) compatibility check issues.
• Fixed PKCE codeVerifier character set generation to strictly conform to RFC 7636 unreserved format.
• Improved error resiliency during token refreshing (transient network / server 5xx failures no longer wipe credentials).
• Implemented self-healing storage capability for corrupted JSON inputs.

---

0.1.5

(Empty release)

---

0.1.4

---

[0.1.4] - 2025-10-15

🎉 Updated Release

• Introduced flutter_secure_auth — a secure, lightweight Flutter authentication utility.
• Added AuthTokens model:
  • Manages accessToken, optional refreshToken, and expiry timestamp.
  • Includes helpers for isExpired and timeToExpiry.
• Added TokenStorage service:
  • Uses FlutterSecureStorage for safe, encrypted token persistence.
  • Supports save, read, and clear methods.
• Added PkcePair generator:
  • Generates RFC 7636–compliant PKCE code verifier and challenge.
  • Includes random state UUID for OAuth 2.0 flow integrity.
• Added AuthException class for consistent, type-safe error handling.
• Added AuthService abstraction (extensible for Supabase, Firebase, etc.).
• Fully documented all public APIs with DartDoc (≥ 20% coverage requirement).
• Implemented null safety and Flutter 3.0+ compatibility.
• 100% lint-compliant (analysis_options.yaml included).
• Added basic unit tests and example app for demo usage.

---

[Unreleased]

🚧 Planned

• Add built-in SupabaseAuthService implementation.
• Add optional refresh token auto-renewal logic.
• Add integration with flutter_bloc and riverpod state management.
• Provide sample OAuth2 / PKCE login flow demo.
• Add biometric unlock support for token retrieval.
• Improve test coverage and CI workflows.

---

0.1.3

---

[0.1.3] - 2025-10-10

🎉 Initial Release

• Introduced flutter_secure_auth — a secure, lightweight Flutter authentication utility.
• Added AuthTokens model:
  • Manages accessToken, optional refreshToken, and expiry timestamp.
  • Includes helpers for isExpired and timeToExpiry.
• Added TokenStorage service:
  • Uses FlutterSecureStorage for safe, encrypted token persistence.
  • Supports save, read, and clear methods.
• Added PkcePair generator:
  • Generates RFC 7636–compliant PKCE code verifier and challenge.
  • Includes random state UUID for OAuth 2.0 flow integrity.
• Added AuthException class for consistent, type-safe error handling.
• Added AuthService abstraction (extensible for Supabase, Firebase, etc.).
• Fully documented all public APIs with DartDoc (≥ 20% coverage requirement).
• Implemented null safety and Flutter 3.0+ compatibility.
• 100% lint-compliant (analysis_options.yaml included).
• Added basic unit tests and example app for demo usage.

---

[Unreleased]

🚧 Planned

• Add built-in SupabaseAuthService implementation.
• Add optional refresh token auto-renewal logic.
• Add integration with flutter_bloc and riverpod state management.
• Provide sample OAuth2 / PKCE login flow demo.
• Add biometric unlock support for token retrieval.
• Improve test coverage and CI workflows.

---