msal_flutter 1.0.0+3

  • Readme
  • Changelog
  • Example
  • Installing
  • 88


Version 1.0.0 uses the updated MSAL Libraries and moves to Android-X. 1.0.0 IS NOT compatiable with older versions. Please only update to 1.0.+ if you are ready to migrate your android app and change how you call the constructor. Version 1+ is however required to use MSAL on iOS 13+

It is also not recommended to use the authority and endpoints, as old appear to be being deprecated and do not seperate saved passwords due to domain being the same for all tenants. The new authority template is https://<tenant><tenant><user-flow> e.g.

For troubleshooting known bugs in the new build, please scroll down to the bottom of the page where all bugs and fixes we find will be noted.

MSAL Wrapper Library for Flutter #

Please note this product is in very early alpha release and subject to change and bugs.

The Microsoft Authentication Library Flutter Wrapper is a wrapper that uses that MSAL libraries for Android and IOS. Currently only the public client application functionality is supported, using the implicit workflow. If you have a requirement for additional functionality however please let me know.

Setup #

To use MSAL Flutter in your library, first setup an Azure AD B2C tenant and mobile client if you have not done so already, for which detailed instructions can be found at

Flutter #

Import the Msal Flutter package into your flutter application by adding it to the list of dependencies in your pubsec.yaml file.

    msal_flutter: ^1.0.0+2

Android (Kotlin) #

NOTE: Due to a known kotlin issue kotlin please ensure you are using Kotlin version 1.3.50 or later. To set this, goto your app's android folder, open the build.gradle file, and under buildscript:ext.kotlin_version change the version to 1.3.50 or later.

This section is mostly copied and modified from the official android MSAL library github repository. Visit the repository for more details and information on how to use it with authentication brokers.

  1. Give youyr app internet permissions
<uses-permission android:name="android.permission.INTERNET"/>
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
  1. In your AndroidManifest.xml file add the following intent filter, replacing the placeholder <YOUR-CLIENT-ID> for your azure b2c application's client id where indicated below. The default redirect url is msal<YOUR-CLIENT-ID>://auth however this can now be changed for android. If you have changed your redirect url to something else, please set the below activity settings to match your own.
        <action android:name="android.intent.action.VIEW" />
        <category android:name="android.intent.category.DEFAULT" />
        <category android:name="android.intent.category.BROWSABLE" />
        <data android:scheme="msal<YOUR-CLIENT-ID>"
            android:host="auth" />
  1. Copy the msal_default_config from this repository (or make your own if you know what you're doing) and place it into your flutter apps android/src/main/res/raw folder. By default/tradition the redirect URL is msal<YOUR-CLIENT-ID>://auth for android, however if you have selected a different redirect url please enter that. Note the redirect URL scheme and host combination MUST BE UNIQUE to your application and if you do change it it must also be changed in the activity intent filter in step 2.

WARNING DO NOT set the application type to single. the MSAL Flutter wrapper is only compatiable with the newer multiple account configuration.

For an example see the example apps usage here

  1. The minimum SDK version must be atleast 21. If you are starting from a new flutter app with the default 16 version, please change this in your gradle settings which can be found in android > app > build.gradle file, and then under the object android:defaultConfig>minSdkVersion

iOS (Swift) #

This section is mostly copied and modified from Step 1 from the official iOS MSAL library github repository. Visit the repository for more details.

  1. Add your URL scheme for callbacks to your Info.plist file, replacing the placeholder for your azure b2c application's client id where indicated below.
  1. Add LSApplicationQueriesSchemes to allow making call to Microsoft Authenticator if installed (For Authentication broker)
  1. Open the app's iOS project in xcode, click on the Runner app to open up the configuration, and under capabilities, expand Keychain Sharing and add the keychain group

  2. Import the MSAL library in your AppDelegate.swift by adding the following at the top of the file

import MSAL

  1. Add the following function to your AppDelegate class
override func application(_ app: UIApplication, open url: URL, options: [UIApplication.OpenURLOptionsKey : Any] = [:]) -> Bool {    
guard let sourceApplication = options[UIApplication.OpenURLOptionsKey.sourceApplication] as? String else {
    return false
return MSALPublicClientApplication.handleMSALResponse(url, sourceApplication: sourceApplication)
  1. Trouble shooting It is possible that you may get errors such as with the minimum iOS deployment being too low. MSAL Flutter requires a minimum iOS version of 11.0 To set this, add platform :ios, '11.0' on the first line of your Podfile file which can be found in the root of your ios folder.

When upgrading from older versions of MSAL Flutter, you might also need to delete your Podfile.lock file, which is also in the iOS folder.

How To Use #

  1. In flutter, import the package import 'package:msal_flutter/msal_flutter.dart';
  1. Use the static factory method createPublicClientApplication to asyncronously create a new instance of the object, by providing your client id, and optionally the authority to authenticate again.

    With default authority:

    var pca = await PublicClientApplication.createPublicClientApplication("YOUR-CLIENT-ID");

    Specifying authroity:

    var pca = await PublicClientApplication.createPublicClientApplication("YOUR-CLIENT-ID", authority: "https://<tenant><tenant><user-flow>");

    If this is null the default authority will be used, as defined by the relevant MSAL library implementation, which currently is the common endpoint.

  2. To retrieve a token interactivity, call the acquireToken function passing the scopes you wish to acquire the token for. Note that this function will throw an error on failure and should be surrounded by a try catch block as per the example below

    DO NOT include the openid or user_impersonation scopes which are added by default

    String token = await pca.acquireToken([""]);
} on MsalException {
    //error handling logic here
  1. Once a user has logged in atleast once, to retrieve a token silently call the acquireTokenSilent function, passing the scopes you wish to acquire the token for. Note that this function will throw an error on failure and should be surrounded by a try catch block as per the example below

    DO NOT include the openid or user_impersonation scopes which are added by default

    String token = await pca.acquireTokenSilent([""]);
} on MsalException{
    // error handling logic here
  1. To logout, call the logout method
    await pca.logout();
} on MsalException{
    // error handling logic here

List of exceptions that can be thrown #

MsalExceptionBase exception, inhertied by all other exceptions. Used for general or unknwon errors
MsalChangedClientIdExceptionAttempt to initialize a second client id with a different clientid
MsalInitializationExceptionError initializing client. Most likely do to incorrect configuration files
MsalInvalidConfigurationExceptionConfiguration error in setting up Public Client Application, such as invalid clientid or authority
MsalInvalidScopeExceptionInvalid scope or no scope supplied. Currently only supported in android
MsalNoAccountExceptionUser has not previously logged, has logged out or refresh token has expired and and acquire token silently cannot be performed
MsalUninitializedExceptionClient method called before client has been initialized
MsalUserCancelledExceptionLogin request cancelled by user. Only currently supported in Android, for iOS a MsalException is thrown instead

Trouble Shooting #

Please note there is currently an issue that seems to occur with Android which uses slightly older versions of kotlin. If you get the error when attemtping to acquire a token, along the lines of "static member msalApp not found", goto your app's android folder, open the build.gradle file, and on the second line change the version of kotlin from 1.3.10 to 1.3.50. For more information take a look at issue #4. A fix will be implemented shortly.

1.0.0+3 #

  • Added specific MSAL Android package version to fix crashing issue caused by updated versions

1.0.0+2 #

  • Updates to readme in regards to kotlin static field issues.

1.0.0+1 #

  • Added some more information to readme for clarity

1.0.0 #

  • New API, including requirement to initialize
  • New static async factory method
  • Removal of old constructor
  • Updated iOS MSAL package to version ~>1.0.3
  • Updated Android MSAL package to version 1.0.+
  • Added ability to use, the new preferred authority
  • Migrated to Android-X
  • logout now returns a value
  • Now compatiable with iOS 13

0.1.2 #

  • Added initial logout functionality

0.1.1 #

  • Added nullcheck on interactive callback to avoid crashes when other plugins callback before msal is initialized

0.1.0 #

  • Released of first beta version.
  • Small bits of formatting cleanup

0.0.5 #

  • Added new custom exception for returning and handling login errors.

0.0.4 #

  • added swift version to podspec
  • added change log for 0.0.3
  • testing changes to ensure easier compatiability with new flutter projects
  • fixes to the readme documentation

0.0.3 #

  • Removed errors from displaying in returned error message in anticipation to change error handling to throw exceptions

0.0.2 #

  • Removed unused pub dependency
  • Removed unused resources
  • removed intent filter from plugin which was pointing to example app client id

0.0.1 #

  • Initial release includes the basic functionality and api for a PublicClientApplication capable of getting tokens interactivity and silently for a single user account at a time


msal_flutter_example #

Demonstrates how to use the msal_flutter plugin.

Getting Started #

This project is a starting point for a Flutter application.

A few resources to get you started if this is your first Flutter project:

For help getting started with Flutter, view our online documentation, which offers tutorials, samples, guidance on mobile development, and a full API reference.

Use this package as a library

1. Depend on it

Add this to your package's pubspec.yaml file:

  msal_flutter: ^1.0.0+3

2. Install it

You can install packages from the command line:

with Flutter:

$ flutter pub get

Alternatively, your editor might support flutter pub get. Check the docs for your editor to learn more.

3. Import it

Now in your Dart code, you can use:

import 'package:msal_flutter/msal_flutter.dart';
Describes how popular the package is relative to other packages. [more]
Code health derived from static analysis. [more]
Reflects how tidy and up-to-date the package is. [more]
Weighted score of the above. [more]
Learn more about scoring.

We analyzed this package on Feb 28, 2020, and provided a score, details, and suggestions below. Analysis was completed with status completed using:

  • Dart: 2.7.1
  • pana: 0.13.5
  • Flutter: 1.12.13+hotfix.8


Package Constraint Resolved Available
Direct dependencies
Dart SDK >=2.1.0 <3.0.0
flutter 0.0.0
Transitive dependencies
collection 1.14.11 1.14.12
meta 1.1.8
sky_engine 0.0.99
typed_data 1.1.6
vector_math 2.0.8
Dev dependencies