tauri-plugin-auth-session-api

import { start } from 'tauri-plugin-auth-session-api'; /** * Initiates an OAuth 2.0 PKCE authentication flow with Google. * Replace placeholders with your actual OAuth provider details. * * NOTE: This client-side code assumes a backend will handle the code exchange for tokens. * For a purely public client, you'd exchange the code directly. */ async function authenticateWithGoogle(): Promise<void> { const clientId = 'YOUR_GOOGLE_CLIENT_ID'; // Replace with your actual client ID const redirectUri = 'myapp://oauth-callback'; // Must match your native app setup (AndroidManifest, Associated Domains) const scope = 'openid profile email'; // In a real application, you would securely generate code_verifier and code_challenge // For simplicity, placeholders are used here. const codeVerifier = 'YOUR_GENERATED_CODE_VERIFIER'; const codeChallenge = 'YOUR_GENERATED_CODE_CHALLENGE_S256'; const authorizeUrl = `https://accounts.google.com/o/oauth2/v2/auth?` + `client_id=${clientId}&` + `redirect_uri=${encodeURIComponent(redirectUri)}&` + `response_type=code&` + `scope=${encodeURIComponent(scope)}&` + `state=secure_random_state_string&` + // Always generate a cryptographically secure state `code_challenge=${codeChallenge}&` + `code_challenge_method=S256`; try { console.log('Starting OAuth flow...'); const callbackUrl = await start({ authorizeUrl, redirectUri: redirectUri, // The scheme and host your app will intercept ephemeral: false // Set to true on Apple platforms for non-SSO sessions }); console.log('OAuth callback URL received:', callbackUrl); const url = new URL(callbackUrl); const code = url.searchParams.get('code'); const state = url.searchParams.get('state'); if (code && state) { console.log('Authorization Code:', code); console.log('State:', state); // Now, exchange the 'code' for access/refresh tokens. // This is typically done on a backend server to keep client secret secure. } else { console.error('Authorization code or state not found in callback URL.'); } } catch (error) { console.error('OAuth flow failed:', error); if (error instanceof Error && error.message.includes("unsupported platform")) { console.warn("Authentication is not supported on this platform (Windows/Linux)."); } } } // Example usage (e.g., triggered by a button click) // authenticateWithGoogle();