fix(deps): update dependency flutter_appauth to v8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
flutter_appauth (source)	dependencies	major	^1.1.1 -> ^8.0.0

---

Release Notes

MaikuB/flutter_appauth (flutter_appauth)

v8.0.0+1

Compare Source

v8.0.0

Compare Source

• Breaking change Replaced the preferEphemeralSession property in the AuthorizationRequest, AuthorizationTokenRequest and EndSessionRequest classes with externalUserAgent. Thanks to the PR from john-slow. externalUserAgent is presented by the newly ExternalUserAgent enum that has the following values
  • asWebAuthenticationSession: uses the ASWebAuthenticationSession APIs where possible. This is the default value and was the default behaviour behaviour that aligns with what the AppAuth iOS SDK would do in choosing the best available user-agent
  • ephemeralAsWebAuthenticationSession: uses an ephemeral session via the ASWebAuthenticationSession APIs. Applications that previously used preferEphemeralSession and specified to be true can migrate by specifying this enum value
  • sfSafariViewController: uses the SFSafariViewController APIs
• Updated iOS plugin details to indicate it needs a minimum iOS version of 11.0. This aligns with the minimum best supported version for Flutter 3.13.0
• Updated macOS plugin details to indicate it needs a minimum iOS version of 10.14. This aligns with the minimum best supported version for Flutter 3.13.0
• [Android] some refactoring around code related to allowInsecureConnections has been done in response to issue 554
• [Android] added logic to help with issues like 205 where an app tries to refresh a token but the instances of AuthorizationService have been disposed
• [macOS] added privacy manifest file

v7.0.1

Compare Source

• [iOS] correctly bumped AppAuth iOS dependency to 1.7.5. The 7.0.0 release mistakenly only bumped the dependency for macOS

v7.0.0

Compare Source

• Breaking change Bumped minimum Flutter and Dart SDK constraints to 3.13.0 and 3.1.0 respectively
• Breaking change all methods have now been made to return non-nullable types
• [macOS] bumped AppAuth iOS dependency to 1.7.5
• Updated error handling to expose more details for each platform. Plugin will now throw FlutterAppAuthUserCancelledException when an authorization request has been cancelled as a result of the user closing the browser. For other scenarios the plugin will throw FlutterAppAuthPlatformException. See the API docs for both classes for more details on the available details. Both exception classes inherit from PlatformException so the changes should be backwards compatible
• Updated readme with more details on essential knowledge and links to OAuth 2.0 specifications

v6.0.7

Compare Source

• [Android] updated plugin to specify Theme.AppCompat.Translucent.NoTitleBar as the theme for the RedirectUriReceiverActivity from the AppAuth Android SDK. This is to fix a crash raised with issues #​362 and #​515

v6.0.6

Compare Source

• [iOS][macOS] bumped AppAuth iOS dependency to 1.7.4

v6.0.5

Compare Source

• [iOS] bumped AppAuth iOS dependency to 1.7.2

v6.0.4

Compare Source

• [Android] when no suitable browser is found when calling either authorize() or authorizeAndExchange(), rather than crashing the plugin will now throw a PlatformException with an error code of no_browser_available. Thanks to the PR from NikHomann
• Removed duplicate asterisk from the 6.0.3 changelog entry around how the example app got updated

v6.0.3

Compare Source

• [Android] community has reported that there seem to be instances where the plugin encounters a null intent on some devices upon processing a end session request. This resulted in a crash before but will now throw a PlatformException. Thanks to the PR from John
• Updated example app so that the Android side specifies the minimum SDK version version that aligns with what's specified by the Flutter SDK

v6.0.2+1

Compare Source

v6.0.2

Compare Source

• [macOS] fixed deprecation warning around using init and to use initWithPresentingWindow via the AppAuth iOS/macOS SDK instead. Thanks to the PR from Ivan Tivonenko

v6.0.1

Compare Source

• [iOS] updated plugin so it supports apps that leverage the multiple window capability that Apple added to iOS 13. Thanks to the PR from Jerold Albertson
• Added a link to the tutorials section of the readme that walks through how to use this plugin with Asgardeo. Thanks to the PR from Achintha Isuru

v6.0.0

Compare Source

• Potentially breaking change [iOS][macOS] bumped AppAuth dependency to 1.6.2 where fixes were done to allow SDK to compile in Xcode 14 by bumping the minimum OS versions
• Bumped maximum Dart SDK constraint
• Recreated iOS and macOS side of example app so it would work with new Flutter 3.10 stable release

v5.0.0

Compare Source

• Breaking change Bumped minimum Flutter SDK version to 3.0.0 and Dart SDK version to 2.17
• [Android] removed references to v1 embedding
• [Android] updated compileSdkVersion to 31 (Android 12)
• [Android] bumped AGP (Android Gradle plugin) to 7.4.2
• [Android] conditionally adds a namespace for compatibility with AGP 8.0
  • Note: it's quite likely that the AppAuth Android SDK itself requires this change going forward but this change will ensure that the flutter_appauth plugin has done this change ahead of time
• Applied following updates to the example app on the Android side
  • Bumped AGP to 7.4.2 and Gradle 7.5
  • Used namespace instead of package identifier since the latter has been deprecated (reference: https://developer.android.com/build/releases/past-releases/agp-7-3-0-release-notes#package-deprecated). Note that as of this writing, using the flutter run command on the stable channel (i.e. Flutter version 3.7.1) to debug/run the app will in an error that says "package identifier or launch activity not found". However, an APK or app bundle can still be built and will run on a device. The Flutter team have already addressed this issue on the master channel that is currently on version 3.10.0-17.0.pre.21 so would expect the next stable release to contain the fix. Alternatively developers can manually restore the package identifier though this change was done to avoid issues from happening in the future

v4.2.1+1

Compare Source

v4.2.1

Compare Source

• [iOS][macOS] bumped AppAuth dependency to 1.6.0

v4.2.0

Compare Source

• Added preferEphemeralSession to EndSessionRequest Thanks to the PR from Daniel Ziegler

v4.1.0+1

Compare Source

v4.1.0

Compare Source

• Added ability to specify the nonce as part of requests

v4.0.1

Compare Source

• Bumped AppAuth iOS dependency. Thanks to PR from Didier Prophete

v4.0.0

Compare Source

• Added support for macOS. Thanks to the PR from Jordy Langen

v3.0.1

Compare Source

• [iOS] fix nonce not being returned correctly on iOS

v3.0.0

Compare Source

• Breaking change AuthorizationResponse's constructor now includes nonce and has changed to take positional parameters
• nonce can now be specified for TokenRequest class. This is especially useful on Android as the AppAuth Android SKD had turned on ID token validation that results in nonce mismatch errors. These errors should no longer appear when using the nonce value returned by the AuthorizationResponse object after calling authorize() and passing the value to the TokenRequest when calling the token() method
• Bumped AppAuth Android SDK to 0.11.1 where the SDK reports that it has fixed an issue where rotating device could lead to the SDK reporting that the user cancelled login flow

v2.4.2

Compare Source

• Added const constructor to FlutterAppAuth

v2.4.1+1

Compare Source

v2.4.1

Compare Source

• [iOS] fixed issue with scopes not being sent correctly as they should've been space-delimited instead of comma-delimited. Thanks to the PR from Angle Wang

v2.4.0

Compare Source

• Added scopes property to TokenResponse class and AuthorizationTokenResponse class that inherits from it. Thanks to PR from leoshusar
• [Android] applied fix to a scenario where skipping https check on the issuer wasn't done for refreshing tokens. Thanks to the PR from Javier Puerto

v2.3.0

Compare Source

• [Android] claims can now be passed as part of the additionalParameters included with requests without triggering an exception by the AppAuth Android SDK. Thanks to the PR from Garry Jeromson

v2.2.0

Compare Source

• [Android] updated error handling so more details are returned. Thanks to Andreas Kägi for originally starting on the PR

v2.1.0+1

Compare Source

v2.1.0

Compare Source

• [Android] ui_locales can now be passed as part of the additionalParameters included with requests without triggering an exception by the AppAuth Android SDK. Thanks to the PR from dimitristoz

v2.0.0

Compare Source

• Breaking change AuthorizationServiceConfiguration constructor has changed to take named parameters
• Added endSession() method, EndSessionRequest and EndSessionResponse classes to support end session requests
• [Android] skips https issuer check if allowInsecureConnections is true. Thanks to the PR from Roman Fürst
• Bumped AppAuth Android and iOS SDK dependencies
• Added FAQs section to readme to describe a common iOS issue with Azure B2C and Azure AD

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.