- handle non successful http requests correctly, throwing either an
OpenIdException
when the response is in the openid error format or anHttpRequestException
otherwise
client
inFlow
,issuer
andclientId
inClient
andclient
inCredential
are now non-nullable
- Bugfixes
- Null safety
- Fix not using Client's httpClient for getTokenResponse
- Add http.Client arguments
- Breaking change:
clientSecret
is now a named argument inClient
constructor - Add optional
forceRefresh
argument togetTokenResponse
- Add
fromJson
andtoJson
toCredential
- Add
revoke
method toCredential
- Add
generateLogoutUrl
method toCredential
- Add jwtBearer flow for grant_type
urn:ietf:params:oauth:grant-type:jwt-bearer
- Added
getTokenResponse
method - Added
createHttpClient
method
- Allow only signing algorithms specified in
id_token_signing_alg_values_supported
parameter of issuer metadata
- Fix Authorization Code PKCE flow
- Dart 2/flutter compatibility
- Initial version