Flutter SDK

dependencies:
abrova_auth:
  hosted: https://center.abrova.ir/api/packages/abrova/pub
  version: ^0.1.1

flutter pub get

import 'package:flutter/material.dart';
import 'package:abrova_auth/abrova_auth.dart';

Future<void> main() async {
  WidgetsFlutterBinding.ensureInitialized();
  await AbrovaAuth.initialize('ab_live_your_api_key');
  runApp(const MyApp());
}

final auth = AbrovaAuth.instance;

final methods = await auth.getMethods();
// methods.anonymous, methods.apple, methods.google, methods.password, methods.magicLink, methods.telegram

if (auth.currentUser == null && methods.anonymous) {
  await auth.signInAnonymously();
}
print(auth.currentUser!.id); // ru_...

await AbrovaSync.init(AbrovaSyncConfig(
  apiKey: 'ab_live_your_api_key',
  tokenProvider: AbrovaAuth.instance.tokenProvider, // null while signed out
));

final result = await auth.signUpWithEmail(
  email: email,
  password: password,
  redirectUrl: 'https://example.com/auth/verify', // optional: sends a verification e-mail
);
// result.signedIn is false when the project requires a verified e-mail first.

await auth.signInWithEmail(email: email, password: password);

await auth.sendPasswordReset(email, redirectUrl: 'https://example.com/auth/reset');
await auth.resetPassword(tokenFromLink, newPassword); // ends every session; does not sign in
await auth.verifyEmail(tokenFromLink);
await auth.sendEmailVerification(redirectUrl: 'https://example.com/auth/verify');

await auth.sendMagicLink(email, redirectUrl: 'myapp://auth/magic');
// When the app is opened with the link:
await auth.signInWithMagicLink(Uri.parse(link).queryParameters['token']!);

final r = await auth.requestTelegramCode('+989121234567');
if (!r.sent && r.botUrl != null) {
  // First time: open r.botUrl so the user starts the bot and shares the number.
}
await auth.verifyTelegramCode('+989121234567', code);

final raw = AbrovaAuthNonce.generate();

// sign_in_with_apple
final apple = await SignInWithApple.getAppleIDCredential(
  scopes: [AppleIDAuthorizationScopes.email, AppleIDAuthorizationScopes.fullName],
  nonce: AbrovaAuthNonce.sha256Hex(raw),
);
await auth.signInWithApple(
  idToken: apple.identityToken!,
  rawNonce: raw,
  authorizationCode: apple.authorizationCode, // lets account deletion revoke the Apple sign-in
  name: [apple.givenName, apple.familyName].whereType<String>().join(' '),
);

// google_sign_in 7 — use a new nonce for each sign-in
final rawG = AbrovaAuthNonce.generate();
await GoogleSignIn.instance.initialize(
  serverClientId: 'xxx.apps.googleusercontent.com',
  nonce: AbrovaAuthNonce.sha256Hex(rawG),
);
final account = await GoogleSignIn.instance.authenticate();
await auth.signInWithGoogle(idToken: account.authentication.idToken!, rawNonce: rawG);

try {
  await auth.linkGoogle(idToken: idToken, rawNonce: raw);
  // or linkApple(...), linkPassword(email: ..., password: ...)
} on AbrovaProviderAlreadyLinkedException {
  // This Google account already has a user: offer to sign in with it instead.
}

auth.currentUser;          // AbrovaAuthUser? — null when signed out
auth.isSignedIn;

auth.authStateChanges.listen((user) {
  // Emits the current user first, then on every sign-in, sign-out and profile change.
});

final me = await auth.getMe(); // fresh from the server
final token = await auth.getToken(); // the access token, if you call your own API with it

await auth.signOut();           // this device; never fails
await auth.signOutEverywhere(); // every device
await auth.deleteAccount();     // deletes the user, then signs out

try {
  await auth.signInWithEmail(email: email, password: password);
} on AbrovaAuthException catch (e) {
  switch (e.code) {
    case AbrovaAuthErrorCode.invalidCredentials:
      showError('Wrong e-mail or password');
    case AbrovaAuthErrorCode.rateLimited:
      showError('Too many attempts. Try again in ${e.retryAfter?.inSeconds ?? 60} s');
    case AbrovaAuthErrorCode.networkError:
      showError('No connection');
    default:
      showError('Sign-in failed');
  }
}