Bearer Token Authorisation is by default access token.

[dart-lang]

Bearer Token Authorisation is by default access token.

[vin-fandemand]

#83

[jonasfj]

But is it a good idea to put more of the OIDC specification into the a package called oauth2?

@vin-fandemand have you considered forking this package and creating a package:oidc instead?
I think it might be better to have a community package focused on serving oipenid-connect needs, and then update the README here to direct users towards said package.

[cwe1ss]

As a (not very pretty) workaround that doesn't require forking this library, we're passing an inner client to the oauth2.Client() constructor that overwrites the authorization header with the idToken.

// Custom inner client that uses the id_token instead of the access_token
class _IdTokenHttpClient extends http.BaseClient {
  _IdTokenHttpClient(this._credentials, this._innerClient);

  final oauth2.Credentials _credentials;
  final http.Client _innerClient;

  @override
  Future<http.StreamedResponse> send(http.BaseRequest request) async {
    request.headers['authorization'] = 'Bearer ${_credentials.idToken}';
    var response = await _innerClient.send(request);
    return response;
  }
}

// Usage:

// Get credentials from somewhere
oauth2.Credentials credentials = ...; 

// The inner-most http client that does the actual http call
http.BaseClient innerClient = http.Client();

// Wrap that client with our IdToken-client if necessary.
if (useIdToken) { 
  innerClient = _IdTokenHttpClient(credentials, innerClient);
}

// Create the oauth2.Client and pass in the innerClient
oauth2.Client oauthClient = oauth2.Client(credentials, httpClient: innerClient, ...);