singpass/android-singpass-in-app-browser-login-demo

This repository demonstrates and details the implementation using Chrome Custom Tabs or external web browsers to initiate a Singpass login using Oauth PKCE flow

android-singpass-in-app-browser-login-demo's Issues

[QUESTION] : is there a way to make this work in Flutter app ?

Hi, i need to ask this question

Is there a way to make this work on Flutter app ?
I have made some kind of workaround by opening the intent://link.... url on the external web browser (so it can open the SingPass app), but after user approve the login, it's not triggering the app link url provided in the redirect_uri.

Since AppAuth library for flutter cannot set the state to null, i can't implement this in Flutter using that library.

The app.properties file is not available.

The app.properties file that consist of backendBaseUrl, generatePkceParamsPath and receiveAuthCodeParams is not available after I pull the branch.

Singpass redirection not working when you click QR code in android

When i click on the QR code it doesn't redirect me to the singpass app, only replicatable on android

Deeplink is not working after approve.

After Singpass Approve not working redirect URL and did not goes to back on app.

Chrome keeps prompting to open app

Hi Kenneth, moving to the external browser approach appears to cause Chrome to keep prompting users whether they want to open the RP app after they are redirected back to the browser from the SP app after authenticating. Do you have any advice on how to work around this issue as it is causing security concerns among users that there are so many redirects and different apps opening in just a single login attempt? We noticed the same prompt in your animated gif of your SingPass Demo (Chrome Custom Tab) implementation.

Also, can i clarify on your use of the term "in-app browser"? Because for most people and on most websites written about this topic, "in-app browser" is synonymous with WebView, but i think you meant to say standalone browser or external browser instead, thanks!

Rgds,
Andrew

Error: Failed to authorize: [error: null, description: Response state param did not match request state]

In my flutter mobile app, I've been using the flutter_appauth package for SingPass SSO integration and I'm facing an issue during the authorization phase. Specifically, the following error is returned when the application is redirected back from the browser after the user has authenticated:

PlatformException(authorize_and_exchange_code_failed, Failed to authorize: [error: null, description: Response state param did not match request state], null, null)

Here is the code I'm using for the authorizeAndExchangeCode method:

import 'package:flutter_appauth/flutter_appauth.dart';

class SingPassLogin {
  final FlutterAppAuth appAuth = FlutterAppAuth();

  Future login() async {
    // configuration of the SingPass authentication
    final AuthorizationServiceConfiguration _serviceConfiguration =
    AuthorizationServiceConfiguration(
        authorizationEndpoint: 'https://test.api.myinfo.gov.sg/com/v4/authorize',
        tokenEndpoint: 'https://test.api.myinfo.gov.sg/com/v4/token'
    );

    try {
      final AuthorizationTokenResponse? result = await appAuth.authorizeAndExchangeCode(
        AuthorizationTokenRequest(
          'STG2-MYINFO-SELF-TEST',
          'sg.gov.singpass.app://ndisample.gov.sg/rp/sample',
          issuer: 'https://test.api.myinfo.gov.sg',
          scopes: ['name',],
          additionalParameters: <String, String>{
            'purpose_id': 'demonstration'
          },
          serviceConfiguration: _serviceConfiguration,
          responseMode: 'code',
        ),
      );

      print('Access token: $result');
    } catch (e) {
      print('Error occurred during login: $e');
    }
  }
}

My understanding is that flutter_appauth should be handling the state parameter automatically. I do not manually set the state parameter anywhere.

Any help or guidance on this issue would be greatly appreciated.

Not able to login

I downloaded the source and run the app. Now I am getting "Expected URL scheme 'http' or 'https' but no colon was found" error when I click the login with singpass. Please help me on this.