voo_authstack_client 0.3.0

Flutter SDK for Voo AuthStack - a centralized authentication platform. Supports email/password, OAuth providers (Google, GitHub, Microsoft, Apple, Discord), automatic token refresh, and provider linking.

Changelog

All notable changes to voo_authstack_client will be documented in this file.

0.3.0 - 2026-06-22

Added

• End-user organizations (B2B multi-tenancy). End-user-authenticated, per-app methods on HostedAccountService under /oauth/applications/{clientId}/me/organizations (available only when the app has organizations enabled):
  • listMyOrganizations, createOrganization, getOrganization, updateOrganization, deleteOrganization.
  • Membership: listOrganizationMembers, listOrganizationInvites, inviteOrganizationMember, cancelOrganizationInvite, acceptOrganizationInvite, removeOrganizationMember, updateOrganizationMemberRole, leaveOrganization.
• Developer/admin reads on VooAuthstackService: listApplicationOrganizations, getApplicationOrganization (org-scoped via the X-Organization-Id header).
• New models (hand-rolled fromJson/toJson, no build_runner): EndUserOrganization, EndUserOrganizationMember, EndUserOrganizationInvite. New enum EndUserOrganizationRole (owner/admin/member).
• BrandManifest.organizationsEnabled — per-app opt-in flag.

Notes

• Additive only. No change to the existing VooAuthstackService auth surface.

0.2.0 - 2026-06-17

Added

• HostedAccountService — full coverage of the hosted-auth end-user pool surface (/oauth/applications/{clientId}/*). Distinct from VooAuthstackService, which authenticates AuthStack platform admins.
  • Anonymous endpoints: getBranding, register, login, refreshSession, logout, verifyEmail, forgotPassword, resetPassword.
  • Authenticated endpoints (require end-user access token from login or refreshSession): getProfile, updateProfile, changeEmail, changePassword, listSessions, revokeSession, revokeAllSessions, deleteAccount.
• New models: HostedEndUser, HostedAuthTokens, HostedSession, BrandManifest. Hand-rolled fromJson/toJson (no build_runner dependency for these).

Notes

• This release does NOT change the existing VooAuthstackService API surface. The new service is additive — apps that only need platform auth can ignore it.

0.1.9 - 2026-01-21

Changed

• Removed voo_core dependency to make the package fully standalone

0.1.8 - 2026-01-17

Fixed

• Fixed OAuth code login endpoint from /auth/oauth/{provider}/code to /auth/oauth/{provider} to match backend API

0.1.7 - 2026-01-17

Fixed

• Fixed token refresh endpoint from /auth/refresh to /auth/refresh-token to match backend API

0.1.6 - 2026-01-15

Fixed

• Added missing OAuthProvider.authstack case to switch expression in example app
• Fixed nullable refreshToken type mismatch in exchangeCodeViaBackend() method

0.1.5 - 2026-01-15

Added

• OAuthProvider.authstack enum value for apps using AuthStack as their identity provider

0.1.4 - 2026-01-15

Added

• exchangeCodeViaBackend() method for routing OAuth code exchange through a custom backend API
  • Enables consumer apps to issue their own JWT tokens instead of using AuthStack tokens
  • Supports flexible response formats (AuthStack format or custom backend format)
  • Automatically stores tokens in configured token storage

0.1.3 - 2026-01-15

Added

• getProviderAuthUrl() method to get OAuth authorization URLs for providers (GitHub, Google, etc.)
  • Enables centralized OAuth flow where AuthStack handles OAuth app configuration
  • Supports custom state parameter for CSRF protection
• getProviderCredentials() method to retrieve OAuth credentials for linked providers
  • Get access tokens to make API calls to provider APIs (e.g., GitHub API)
  • Includes token expiration checking
• New models: ProviderAuthUrl and ProviderCredentials
• Support for all OAuth providers: Google, GitHub, Microsoft, Apple, Discord

Changed

• Enhanced documentation for OAuth provider integration

0.1.2 - 2025-12-24

Fixed

• Fixed SDK constraint from >=3.8.1 to >=3.5.0 to support Flutter 3.27.0 (Dart 3.6.0)
• Downgraded flutter_lints from ^6.0.0 to ^5.0.0 for Dart 3.6.0 compatibility

0.1.1 - 2025-12-23

Changed

• Updated package metadata and documentation

0.1.0 - 2025-12-23

Added

• Initial release of Voo AuthStack Client SDK
• Email/password authentication support
• OAuth provider support (Google, GitHub, Microsoft, Apple, Discord)
• Automatic token refresh with configurable thresholds
• Secure token storage
• Provider account linking
• Clean architecture with domain, data, and presentation layers
• Dio-based HTTP client with interceptors
• Comprehensive error handling with typed exceptions