mohanajuhi166 / aad-b2c-webview

AAD b2c Webview

Azure AD B2C Embedded Webview

Azure AD B2C Embedded Webview is a very simple Flutter package that demonstrates how to use the embedded web view to sign in users with Azure AD B2C. Currently, using Flutter packages

• appAuth and flutter_azure_b2c redirects to browser and doesn't provide in-app experience.

This package embeds the web view of the user flow endpoint using flutter_appview and redirects the user as per onRedirect callback method.

Features

Embedded web view for Azure AD B2C for providing in-app experience Redirects to the route specified in redirectRoute after successful sign in Successfully secures the id token or access token in the app using flutter secure storage Navigates to screen in app after successful sign in

Getting started

To use the package in your Flutter app, add the following code to your main.dart file:

dependencies:
  aad_b2c_webview: ^0.0.1

Usage

Example added in aad-b2c-webview/aad_b2c folder

@override
Widget build(BuildContext context) {
  return MaterialApp(
    title: 'Flutter Demo',
    theme: ThemeData(
      primaryColor: const Color(0xFF2F56D2),
      textTheme: const TextTheme(
        headlineLarge: TextStyle(
          color: Colors.black,
          fontSize: 32,
          fontWeight: FontWeight.w700,
          fontFamily: 'UberMove',
        ),
        bodyText1: TextStyle(
          color: Color(0xFF8A8A8A),
          fontSize: 17,
          fontWeight: FontWeight.w400,
          fontFamily: 'UberMoveText',
        ),
        headline2: TextStyle(
          fontSize: 18,
          color: Colors.black,
          fontWeight: FontWeight.w700,
          fontFamily: 'UberMove',
        ),
      ),
    ),
    debugShowCheckedModeBanner: false,
    initialRoute: '/',
    routes: {
      // When navigating to the "/" route, build the Create Account widget.

      '/': (context) =>
      const ADB2CEmbedWebView(
        url: '<user_flow_endpoint>',
        clientId: '<client_id_of_user_flow>',
        redirectUrl: '<redirect_uri_of_user_flow>',
        appRedirectRoute: '<route_to_redirect_to_after_sign_in>',
        onRedirect: onRedirect,
      ),
    },
  );
}

Parameters Used In ADB2CEmbedWebView

• url: This is the user flow/policy endpoint

• clientId: This is client id of the application used for redirection within user flow

• redirectUrl: This is redirect Url of the application used for redirection within user flow

• appRedirectRoute: This is the in-app route to navigate to, after successful sign in on redirect

• onRedirect: This is the callback method to handle the redirect url. This method is called when the redirect url is hit. This method should return the route to navigate to after successful sign in.

aad-b2c-webview's Issues

Incorrect scope used when requesting access tokens

Hello,

I'm currently utilizing this library in a project and I've encountered an issue where the access token is not being received.

When the library opens the sign-in page, it correctly uses the scopes I provide. However, in the getAllTokens function, the scopes are hardcoded to openid and offline_access rather than utilizing the scopes that were passed in.

This is the current implementation in the getAllTokens function:

Future<AzureTokenResponse?> getAllTokens({
...
String scopes = Constants.defaultScopes, //problem is here
...
}) async {
//...
}

Since the scope constant to 'openid profile offline_access', the library only fetches id_token and refresh_token but not the access_token.

The scope parameter in the post request data should be set to the scope provided, which can be done by passing it as a parameter to the getAllTokens function. If no scope is provided, then it can default to 'openid offline_access'.

Thank you for your attention to this issue. Please let me know if any more information is needed.

How to receive access token with example code by default receiving IDToken

1. Included plugin and used ADB2CEmbedWebView sample code for receiving access_token
2. But by default callback is coming in onIDToken,
3. Tried declaring responseType as 'access_token' but it is not supported.
   What is the correct responseType for access_token

unable to retrieve refresh token.

onRefereshToken function throw 400 status code with bad request .
i also try using postman but got same result bas request.

Redirect Uri is not working

When I click the "AD sign-in" button I am getting "ERR: UNKNOWN_URL_SCHEME" and the actual error is aadb2c90006 - "The redirect URI provided in the request is not registered for the client id".

Here are the steps to reproduce the issue:

1. Created a tenant in Azure Portal
2. Registered the app
3. Added redirect URI for Android which has the following structure: msauth://com.companyname.appname/my-hash-code
4. Added the below activity block in my AndroidManifest.xml
5. Implemented the sample for aad_b2c_webview

<activity
    android:exported="true"
    android:name="com.microsoft.identity.client.BrowserTabActivity">
    <intent-filter>
        <action android:name="android.intent.action.VIEW" />
        <category android:name="android.intent.category.DEFAULT" />
        <category android:name="android.intent.category.BROWSABLE" />
        <data android:scheme="msauth"
            android:host="com.companyname.appname"
            android:path="/my-hash-code" />
    </intent-filter>
</activity>