magic_social_auth 0.0.5

Social authentication plugin for Magic Framework. Laravel Socialite-style API with extensible drivers.

Changelog

[Unreleased]

0.0.5 - 2026-09-22

Changed

• Every sibling floor names this batch's release. magic moves ^0.0.15 to ^0.0.16; fluttersdk_artisan stays at ^0.0.16, still the newest. The old ranges already admitted the new versions, so a fresh pub get resolves nothing differently; what changes is that the floors name the releases this package is verified against. magic 0.0.16 widens file_picker to admit 13, where PlatformFile.length() answers null for an unreadable file; this package does not call Pick. (pubspec.yaml)

0.0.4 - 2026-09-21

Changed

• Every sibling floor names this batch's release. magic moves ^0.0.5 to ^0.0.15 and fluttersdk_artisan ^0.0.8 to ^0.0.16. The old ranges already admitted the new versions, so a fresh pub get resolves nothing differently; what changes is that the floors name the releases this package is verified against. magic 0.0.15 is breaking in its database layer (a migration may no longer manage its own transaction, and DB.transaction refuses a callback that closes the transaction itself); nothing in this package calls either, so no code here changes, but an app below magic 0.0.15 no longer resolves this release. (pubspec.yaml)

0.0.3 - 2026-08-25

Added

• The Google driver's error-translation contract has tests, and a seam to reach it through. getToken's try/catch is the whole contract consumers code against: a provider failure becomes SocialAuthException, a user cancel becomes SocialAuthCancelledException so "backed out" can be told from "failed", and an exception that is already ours is rethrown unchanged. Nothing covered any of it, because every route into that code runs through the platform channel. supportsNativeSignIn, nativeSignIn and ensureInitialized are now @visibleForTesting members a test subclass stands in for, and _accountToToken is accountToToken for the same reason. Four tests pin the contract; two of them fail if the await added in #10 is removed, so the fix has a regression guard rather than only an analyzer warning. Additive: no existing call site changes. (lib/src/drivers/google_driver.dart, test/drivers/google_driver_test.dart)
• codecov.yml, with patch coverage informational and project coverage still a gate. This package is a thin wrapper over provider SDKs whose calls only exist behind a platform channel, so a one-line fix in one of those branches scores 0% patch coverage however well the surrounding behaviour is tested. That is what happened on #10. Blocking on the number pushes toward inventing a seam for every platform call, or writing assertions like "this throws without a channel" purely to colour a line green. Total coverage is the honest gate and it went 55.0% -> 57.0% with the tests above. (codecov.yml)

Fixed

• A failure inside _accountToToken escaped the Google driver's error translation. getToken's native branch did return _accountToToken(account) inside the try whose catch clauses are the whole point of the method: they turn a GoogleSignInException into SocialAuthCancelledException on a user cancel and into SocialAuthException otherwise. Returning the future unawaited means anything it throws is raised after the try has already completed, so those handlers never see it and the caller gets a raw exception instead of this package's contract. It is reachable: _accountToToken reads account.authentication.idToken with no guard of its own, and only its inner authorizationForScopes call is wrapped. Now return await. Surfaced by the analyzer's unawaited_return_in_try_block, which turned master red on a newer Dart than the PR that last touched the file ran against, and the warning was right. (lib/src/drivers/google_driver.dart)

0.0.2 - 2026-07-26

Changed

• magic constraint bumped to ^0.0.3 -> ^0.0.5. The old bound excluded every magic release since 0.0.4: under pub's 0.0.z caret semantics ^0.0.3 means <0.0.4, so this plugin could not resolve alongside a consumer on current magic at all. Now tracks magic 0.0.5. No behavior change in this package.

0.0.1 - 2026-06-24

📚 Documentation

• README: Rewrite to match Magic ecosystem format
• doc/ folder: Add comprehensive documentation

0.0.1-alpha.1 - 2026-03-25

✨ Core Features

• Laravel Socialite-style API: SocialAuth.driver('google').authenticate() facade pattern
• Google Driver: Native Google Sign-In SDK on mobile, auth popup on web
• Microsoft Driver: OAuth authorization code flow via flutter_web_auth_2
• GitHub Driver: OAuth browser flow with code exchange
• Extensible Drivers: Register custom drivers via SocialAuth.manager.extend()
• Custom Auth Handlers: Swap backend auth with SocialAuth.manager.setHandler()
• Platform Detection: Conditional imports for iOS, Android, Web, macOS, Windows, Linux
• SocialToken Model: Supports both token and code-exchange authentication flows
• SocialAuthButtons Widget: Config-driven UI with platform filtering and loading states
• SocialProviderIcons: SVG icon registry with custom provider support
• Service Provider: Magic Framework IoC integration via SocialAuthServiceProvider
• Sign Out: Global SocialAuth.signOut() clears all cached driver sessions