portico_auth_credentials 1.0.0

Secure password hashing (Argon2id) and user identity management for Portico Auth.

Portico Auth Credentials

Support for user identity management and hardened credential verification using Argon2id. This package provides the core logic for securely hashing and verifying user passwords.

Note

Passwords are never stored at rest.

Features

• Secure Hashing: Uses Argon2id for password hashing via package:cryptography.
• Validation: Built-in validation for password strength (standard and rigid).
• Storage Agnostic: Interface-driven design allows for SQLite, YAML, or in-memory backends.
• Exception Driven: Clear, descriptive exceptions for common failure modes (InvalidCredentials, UserExists, etc.).

Getting started

Add this package to your pubspec.yaml:

dependencies:
  portico_auth_credentials: ^1.0.0

Interactive Web Simulator

Experience the full capabilities of the Portico Auth ecosystem without setting up a backend. The Web Simulator runs the entire stack (Client, Server, and Storage) directly in your browser.

• Run the Web Simulator

Usage

1. Choose a Storage Adapter

For testing or development, use the in-memory adapter. For production, use a persistent adapter like SQLite or YAML, or provide your own.

import 'package:portico_auth_credentials/portico_auth_credentials.dart';

final storage = AuthCredentialsInMemoryStorage();
final auth = AuthCredentialsManager(storage: storage);

2. Register a User

The registerUser method handles validation and hashing automatically.

try {
  await auth.registerUser('[e-mail]', 'securePassword123');
  print('User registered successfully.');
} on UserAlreadyExistsException {
  print('That userId is already in use.');
} on WeakPasswordException catch (e) {
  print('Password is too weak: ${e.message}');
}

3. Verify Credentials

try {
  await auth.verifyCredentials('[e-mail]', 'securePassword123');
  print('Login successful!');
} on InvalidCredentialsException {
  print('Wrong password.');
} on UserDoesNotExistException {
  print('User not found.');
}

4. Update Password

await auth.updatePassword(
  '[e-mail]',
  'securePassword123', // Old password
  'newPassword456',    // New password
);

Examples

• Basic Usage Example: Demonstrates registration, verification, and password updates in a single script.