[firebase_auth] Example for Custom OAuth provider flow for Microsoft Active Directory

[jthegedus]

#1107 was asking about Microsoft OAuth & Active Directory support since Firebase added the feature back in 2019.

A recent update in that thread from @Salakar mentioned the roadmap and rework (kudos everyone) and then says:

this feature is should now be supported through the custom OAuth provider flow

Looking at the FlutterFire Auth documentation there doesn't appear to be a reference to Custom Auth providers. And the Social Auth section containing Google, FB, Apple, Twitter and GitHub would indicate that Microsoft would follow as a direct implementation.

Can someone shed light on:

• the current state of the docs (are they just behind the implementation?)
• if there is an ETA on Microsoft AD support?
• if there is an ETA or WIP documentation for Custom OAuth provider flows?

Thanks (I'm new to Dart/Flutter so excuse if custom OAuth is a simple solution, I cannot find any ref to it)

[paurakhsharma]

I have the same question @jthegedus, did you find any solution?

[jthegedus]

AD is supported via the generic OAuthProvider(). It was pretty easy to implement, but IMO the docs should have at least one example to reduce the confusion and demonstrate the FlutterFire Auth libraries completeness.

This is how I did it with FlutterFire Auth for a Web project:

FirebaseApp myApp = Firebase.app('my_app');
FirebaseAuth auth = FirebaseAuth.instanceFor(app: myApp);

OAuthProvider provider = OAuthProvider('microsoft.com');
provider.setCustomParameters({'tenant': 'your_tenant_id_here'});
await auth.signInWithPopup(provider);

[EDIT]: WEB ONLY

[IDONTSUDO]

Thx!111

[iharshb]

What to do for App ?

[paurakhsharma]

@iharshb Try this: https://stackoverflow.com/a/64218952/8468530

[paurakhsharma]

@jthegedus Thank you so much for the response, but I believe this only works for a web project.
Any suggestions on how I can do this for android and iOS?

[paurakhsharma]

One quick question, how did you find out that you can pass tenent in customOAuthParameters?
I couldn't find it in the docs of https://github.com/amrfarid140/firebase_auth_oauth.

I am asking because I want to know if I can pass the redirect_uri in it as well.

Because I am getting:

This error with this config:

User user = await FirebaseAuthOAuth().openSignInFlow(
      "microsoft.com",
      ["email"],
      {
        'tenant': 'dfbadb90-c04c-470a-91d7-39770206817b',
      },
    );

Any idea why I might be getting this error?

[jthegedus]

One quick question, how did you find out that you can pass tenent in customOAuthParameters?

I've been reading the source code of all these packages to try and understand how they differ and what they support. I generally open the repo in GitHub and use the search for particular terms. In this instance, customOAuthParameters is used the same here as in the other MSAL libs, so I just tried it.

Any idea why I might be getting this error?

I think I saw that error when my AD redirect wasn't registered - https://firebase.google.com/docs/auth/android/microsoft-oauth#before_you_begin point 4.b.

When registering apps with these providers, be sure to register the *.firebaseapp.com domain for your project as the redirect domain for your app (Azure AD app).

Or the tenant ID is incorrect for the Firebase AD Secret/AppID config in the Web Console

[jthegedus]

Another piece of documentation:

With the Azure AD v2.0 endpoint, you specify the offline_access permission in the scope parameter to explicitly request a refresh token when using the OAuth 2.0 or OpenID Connect protocols

source: https://docs.microsoft.com/en-us/graph/permissions-reference#remarks-16

So perhaps you require both openid and offline_access to get the correct token with the AadOuath library?

[paurakhsharma]

@jthegedus Thank you so so much. firebase_auth_oauth method worked for me 🎉 I hope you find success with FirebaseAuth.instance.signInWithCredential(credential) method.

[jthegedus]

I'm glad it helped 😄