Redirecting to Specific IDP Forms using OIDC Plugin

[MarinCouderc]

Hello,

We are developing a Flutter application and are using Keycloak as our identity provider (IDP). We have successfully implemented the oidc plugin for authentication purposes, and it has been working seamlessly for our login process.

However, we have encountered a challenge that we hope you can help us with. Our application features a native Flutter homepage that includes two buttons: one for registration and another for login. Initially, we were able to direct users to the appropriate Keycloak form based on their selection—either to the registration form or the login form.

We understand that this requirement might not be related to Dynamic Client Registration. However, we believe there should be a way to specify the desired IDP URI to the oidc plugin to direct users to the correct Keycloak page based on their choice (for example as a parameter to loginAuthorizationCodeFlow). We are reaching out to inquire if this use case is supported by the oidc plugin, and if so, could you please provide guidance or insights on how to achieve this?

Thanks!

[ahmednfwela]

Hello,
You can pass arbitrary query parameters using the extraParameters field when authenticating.

oidc/packages/oidc/lib/src/managers/user_manager.dart

Line 117 in 4e9fbac

Map<String, dynamic>? extraParameters,

does this solve your use-case @MarinCouderc ?

[MarinCouderc]

Kind of. What would help us the most would be similar to what openid_client package does, eg. the login method would give us a Function(String) parameter we could use to get the current uri, and when needed replace '/auth' by '/registrations' (which is what we're doing now, but would rather migrate to oidc plugin as it is way more stable). Hope what I'm saying makes sense!

[ahmednfwela]

I can introduce an authorization url override parameter to work around this

[MarinCouderc]

That would be perfect, thanks!

[ahmednfwela]

@MarinCouderc Just published a new version that addresses this, waiting for your feedback!

[ahmednfwela]

Relevant docs entry: https://bdaya-dev.github.io/oidc/oidc-usage/#overriding-the-discovery-document

[MarinCouderc]

@ahmednfwela Tested it, it works perfectly well, thanks a lot for your very quick support!

[s681562]

@MarinCouderc Could you please share the code / authorizationEndpointUri?

I am using this for direct going to Register form. But doesn't work. I got missing cookie message.

Uri authorizationEndpointUri = Uri.parse("https://.../realms/.../login-actions/registration"); await manager!.loginAuthorizationCodeFlow( discoveryDocumentOverride: manager!.discoveryDocument.copyWith( authorizationEndpoint: authorizationEndpointUri, ) );

I am using this for direct going to Forgot Password form. But when click on Back to Login, I got missing cookie message, instead.

Uri authorizationEndpointUri = Uri.parse("https://.../realms/.../login-actions/reset-credentials"); await manager!.loginAuthorizationCodeFlow( discoveryDocumentOverride: manager!.discoveryDocument.copyWith( authorizationEndpoint: authorizationEndpointUri, ) );

Which params are missing in loginAuthorizationCodeFlow?

[ahmednfwela]

hi @s681562 can you please elaborate on what error message you got? was it from keycloak or from the client side ?