···

       
30
       
 
       
  // not double!

     

       
31
       
 
       
  // Correct:   dev.workers.example:/oauth/callback

     

       
32
       
 
       
  // Incorrect: dev.workers.example://oauth/callback

     

       
33
       
-
       
  static const String customSchemeCallback =

     

       
34
       
-
       
      '$customScheme:/oauth/callback';

     

       
35
       
 
       


     

       
36
       
 
       
  // HTTPS callback (fallback for PDS that don't support custom

     

       
37
       
 
       
  // URI schemes)

     

···

       
30
       
 
       
  // not double!

     

       
31
       
 
       
  // Correct:   dev.workers.example:/oauth/callback

     

       
32
       
 
       
  // Incorrect: dev.workers.example://oauth/callback

     

       
33
       
+
       
  static const String customSchemeCallback = '$customScheme:/oauth/callback';

     

       
0
       
 
       

     

       
34
       
 
       


     

       
35
       
 
       
  // HTTPS callback (fallback for PDS that don't support custom

     

       
36
       
 
       
  // URI schemes)

     

···

       
5
       
 
       
// /xrpc/social.coves.feed.getDiscover

     

       
6
       
 
       


     

       
7
       
 
       
class TimelineResponse {

     

       
8
       
-
       


     

       
9
       
 
       
  TimelineResponse({required this.feed, this.cursor});

     

       
10
       
 
       


     

       
11
       
 
       
  factory TimelineResponse.fromJson(Map<String, dynamic> json) {

     
···

       
33
       
 
       
}

     

       
34
       
 
       


     

       
35
       
 
       
class FeedViewPost {

     

       
36
       
-
       


     

       
37
       
 
       
  FeedViewPost({required this.post, this.reason});

     

       
38
       
 
       


     

       
39
       
 
       
  factory FeedViewPost.fromJson(Map<String, dynamic> json) {

     
···

       
50
       
 
       
}

     

       
51
       
 
       


     

       
52
       
 
       
class PostView {

     

       
53
       
-
       


     

       
54
       
 
       
  PostView({

     

       
55
       
 
       
    required this.uri,

     

       
56
       
 
       
    required this.cid,

     
···

       
107
       
 
       
}

     

       
108
       
 
       


     

       
109
       
 
       
class AuthorView {

     

       
110
       
-
       


     

       
111
       
 
       
  AuthorView({

     

       
112
       
 
       
    required this.did,

     

       
113
       
 
       
    required this.handle,

     
···

       
130
       
 
       
}

     

       
131
       
 
       


     

       
132
       
 
       
class CommunityRef {

     

       
133
       
-
       


     

       
134
       
 
       
  CommunityRef({required this.did, required this.name, this.avatar});

     

       
135
       
 
       


     

       
136
       
 
       
  factory CommunityRef.fromJson(Map<String, dynamic> json) {

     
···

       
146
       
 
       
}

     

       
147
       
 
       


     

       
148
       
 
       
class PostStats {

     

       
149
       
-
       


     

       
150
       
 
       
  PostStats({

     

       
151
       
 
       
    required this.upvotes,

     

       
152
       
 
       
    required this.downvotes,

     
···

       
169
       
 
       
}

     

       
170
       
 
       


     

       
171
       
 
       
class PostEmbed {

     

       
172
       
-
       


     

       
173
       
 
       
  PostEmbed({required this.type, this.external, required this.data});

     

       
174
       
 
       


     

       
175
       
 
       
  factory PostEmbed.fromJson(Map<String, dynamic> json) {

     
···

       
191
       
 
       
}

     

       
192
       
 
       


     

       
193
       
 
       
class ExternalEmbed {

     

       
194
       
-
       


     

       
195
       
 
       
  ExternalEmbed({

     

       
196
       
 
       
    required this.uri,

     

       
197
       
 
       
    this.title,

     
···

       
217
       
 
       
}

     

       
218
       
 
       


     

       
219
       
 
       
class PostFacet {

     

       
220
       
-
       


     

       
221
       
 
       
  PostFacet({required this.data});

     

       
222
       
 
       


     

       
223
       
 
       
  factory PostFacet.fromJson(Map<String, dynamic> json) {

     
···

       
227
       
 
       
}

     

       
228
       
 
       


     

       
229
       
 
       
class FeedReason {

     

       
230
       
-
       


     

       
231
       
 
       
  FeedReason({required this.type, required this.data});

     

       
232
       
 
       


     

       
233
       
 
       
  factory FeedReason.fromJson(Map<String, dynamic> json) {

     

···

       
5
       
 
       
// /xrpc/social.coves.feed.getDiscover

     

       
6
       
 
       


     

       
7
       
 
       
class TimelineResponse {

     

       
0
       
 
       

     

       
8
       
 
       
  TimelineResponse({required this.feed, this.cursor});

     

       
9
       
 
       


     

       
10
       
 
       
  factory TimelineResponse.fromJson(Map<String, dynamic> json) {

     
···

       
32
       
 
       
}

     

       
33
       
 
       


     

       
34
       
 
       
class FeedViewPost {

     

       
0
       
 
       

     

       
35
       
 
       
  FeedViewPost({required this.post, this.reason});

     

       
36
       
 
       


     

       
37
       
 
       
  factory FeedViewPost.fromJson(Map<String, dynamic> json) {

     
···

       
48
       
 
       
}

     

       
49
       
 
       


     

       
50
       
 
       
class PostView {

     

       
0
       
 
       

     

       
51
       
 
       
  PostView({

     

       
52
       
 
       
    required this.uri,

     

       
53
       
 
       
    required this.cid,

     
···

       
104
       
 
       
}

     

       
105
       
 
       


     

       
106
       
 
       
class AuthorView {

     

       
0
       
 
       

     

       
107
       
 
       
  AuthorView({

     

       
108
       
 
       
    required this.did,

     

       
109
       
 
       
    required this.handle,

     
···

       
126
       
 
       
}

     

       
127
       
 
       


     

       
128
       
 
       
class CommunityRef {

     

       
0
       
 
       

     

       
129
       
 
       
  CommunityRef({required this.did, required this.name, this.avatar});

     

       
130
       
 
       


     

       
131
       
 
       
  factory CommunityRef.fromJson(Map<String, dynamic> json) {

     
···

       
141
       
 
       
}

     

       
142
       
 
       


     

       
143
       
 
       
class PostStats {

     

       
0
       
 
       

     

       
144
       
 
       
  PostStats({

     

       
145
       
 
       
    required this.upvotes,

     

       
146
       
 
       
    required this.downvotes,

     
···

       
163
       
 
       
}

     

       
164
       
 
       


     

       
165
       
 
       
class PostEmbed {

     

       
0
       
 
       

     

       
166
       
 
       
  PostEmbed({required this.type, this.external, required this.data});

     

       
167
       
 
       


     

       
168
       
 
       
  factory PostEmbed.fromJson(Map<String, dynamic> json) {

     
···

       
184
       
 
       
}

     

       
185
       
 
       


     

       
186
       
 
       
class ExternalEmbed {

     

       
0
       
 
       

     

       
187
       
 
       
  ExternalEmbed({

     

       
188
       
 
       
    required this.uri,

     

       
189
       
 
       
    this.title,

     
···

       
209
       
 
       
}

     

       
210
       
 
       


     

       
211
       
 
       
class PostFacet {

     

       
0
       
 
       

     

       
212
       
 
       
  PostFacet({required this.data});

     

       
213
       
 
       


     

       
214
       
 
       
  factory PostFacet.fromJson(Map<String, dynamic> json) {

     
···

       
218
       
 
       
}

     

       
219
       
 
       


     

       
220
       
 
       
class FeedReason {

     

       
0
       
 
       

     

       
221
       
 
       
  FeedReason({required this.type, required this.data});

     

       
222
       
 
       


     

       
223
       
 
       
  factory FeedReason.fromJson(Map<String, dynamic> json) {

     

···

       
15
       
 
       
/// ✅ Tokens are stored securely by the package (iOS Keychain / Android EncryptedSharedPreferences)

     

       
16
       
 
       
/// ✅ Automatic token refresh handled by the package

     

       
17
       
 
       
class AuthProvider with ChangeNotifier {

     

       
18
       
-
       


     

       
19
       
 
       
  /// Constructor with optional OAuthService for dependency injection (testing)

     

       
20
       
 
       
  AuthProvider({OAuthService? oauthService})

     

       
21
       
-
       
      : _oauthService = oauthService ?? OAuthService();

     

       
22
       
 
       
  final OAuthService _oauthService;

     

       
23
       
 
       


     

       
24
       
 
       
  // SharedPreferences keys for storing session info

     

···

       
15
       
 
       
/// ✅ Tokens are stored securely by the package (iOS Keychain / Android EncryptedSharedPreferences)

     

       
16
       
 
       
/// ✅ Automatic token refresh handled by the package

     

       
17
       
 
       
class AuthProvider with ChangeNotifier {

     

       
0
       
 
       

     

       
18
       
 
       
  /// Constructor with optional OAuthService for dependency injection (testing)

     

       
19
       
 
       
  AuthProvider({OAuthService? oauthService})

     

       
20
       
+
       
    : _oauthService = oauthService ?? OAuthService();

     

       
21
       
 
       
  final OAuthService _oauthService;

     

       
22
       
 
       


     

       
23
       
 
       
  // SharedPreferences keys for storing session info

     

···

       
181
       
 
       
                      onPressed: () {

     

       
182
       
 
       
                        showDialog(

     

       
183
       
 
       
                          context: context,

     

       
184
       
-
       
                          builder: (context) => AlertDialog(

     

       
0
       
 
       

     

       
185
       
 
       
                                backgroundColor: const Color(0xFF1A2028),

     

       
186
       
 
       
                                title: const Text(

     

       
187
       
 
       
                                  'What is a handle?',

     

···

       
181
       
 
       
                      onPressed: () {

     

       
182
       
 
       
                        showDialog(

     

       
183
       
 
       
                          context: context,

     

       
184
       
+
       
                          builder:

     

       
185
       
+
       
                              (context) => AlertDialog(

     

       
186
       
 
       
                                backgroundColor: const Color(0xFF1A2028),

     

       
187
       
 
       
                                title: const Text(

     

       
188
       
 
       
                                  'What is a handle?',

     

···

       
6
       
 
       


     

       
7
       
 
       
/// Base class for all API exceptions

     

       
8
       
 
       
class ApiException implements Exception {

     

       
9
       
-
       


     

       
10
       
 
       
  ApiException(this.message, {this.statusCode, this.originalError});

     

       
11
       
 
       
  final String message;

     

       
12
       
 
       
  final int? statusCode;

     
···

       
20
       
 
       
/// Token expired, invalid, or missing

     

       
21
       
 
       
class AuthenticationException extends ApiException {

     

       
22
       
 
       
  AuthenticationException(super.message, {super.originalError})

     

       
23
       
-
       
      : super(statusCode: 401);

     

       
24
       
 
       
}

     

       
25
       
 
       


     

       
26
       
 
       
/// Resource not found (404)

     

       
27
       
 
       
/// PDS, community, post, or user not found

     

       
28
       
 
       
class NotFoundException extends ApiException {

     

       
29
       
 
       
  NotFoundException(super.message, {super.originalError})

     

       
30
       
-
       
      : super(statusCode: 404);

     

       
31
       
 
       
}

     

       
32
       
 
       


     

       
33
       
 
       
/// Server error (500+)

     
···

       
40
       
 
       
/// No internet, connection refused, timeout

     

       
41
       
 
       
class NetworkException extends ApiException {

     

       
42
       
 
       
  NetworkException(super.message, {super.originalError})

     

       
43
       
-
       
      : super(statusCode: null);

     

       
44
       
 
       
}

     

       
45
       
 
       


     

       
46
       
 
       
/// Federation error

     

       
47
       
 
       
/// atProto PDS unreachable or DID resolution failure

     

       
48
       
 
       
class FederationException extends ApiException {

     

       
49
       
 
       
  FederationException(super.message, {super.originalError})

     

       
50
       
-
       
      : super(statusCode: null);

     

       
51
       
 
       
}

     

···

       
6
       
 
       


     

       
7
       
 
       
/// Base class for all API exceptions

     

       
8
       
 
       
class ApiException implements Exception {

     

       
0
       
 
       

     

       
9
       
 
       
  ApiException(this.message, {this.statusCode, this.originalError});

     

       
10
       
 
       
  final String message;

     

       
11
       
 
       
  final int? statusCode;

     
···

       
19
       
 
       
/// Token expired, invalid, or missing

     

       
20
       
 
       
class AuthenticationException extends ApiException {

     

       
21
       
 
       
  AuthenticationException(super.message, {super.originalError})

     

       
22
       
+
       
    : super(statusCode: 401);

     

       
23
       
 
       
}

     

       
24
       
 
       


     

       
25
       
 
       
/// Resource not found (404)

     

       
26
       
 
       
/// PDS, community, post, or user not found

     

       
27
       
 
       
class NotFoundException extends ApiException {

     

       
28
       
 
       
  NotFoundException(super.message, {super.originalError})

     

       
29
       
+
       
    : super(statusCode: 404);

     

       
30
       
 
       
}

     

       
31
       
 
       


     

       
32
       
 
       
/// Server error (500+)

     
···

       
39
       
 
       
/// No internet, connection refused, timeout

     

       
40
       
 
       
class NetworkException extends ApiException {

     

       
41
       
 
       
  NetworkException(super.message, {super.originalError})

     

       
42
       
+
       
    : super(statusCode: null);

     

       
43
       
 
       
}

     

       
44
       
 
       


     

       
45
       
 
       
/// Federation error

     

       
46
       
 
       
/// atProto PDS unreachable or DID resolution failure

     

       
47
       
 
       
class FederationException extends ApiException {

     

       
48
       
 
       
  FederationException(super.message, {super.originalError})

     

       
49
       
+
       
    : super(statusCode: null);

     

       
50
       
 
       
}

     

···

       
15
       
 
       
/// rotates tokens automatically (~1 hour expiry), and caching tokens would

     

       
16
       
 
       
/// cause 401 errors after the first token expires.

     

       
17
       
 
       
class CovesApiService {

     

       
18
       
-
       


     

       
19
       
 
       
  CovesApiService({Future<String?> Function()? tokenGetter})

     

       
20
       
 
       
    : _tokenGetter = tokenGetter {

     

       
21
       
 
       
    _dio = Dio(

     
···

       
264
       
 
       
      case DioExceptionType.cancel:

     

       
265
       
 
       
        throw ApiException('Request cancelled', originalError: e);

     

       
266
       
 
       
      default:

     

       
267
       
-
       
        throw ApiException(

     

       
268
       
-
       
          'Unknown error: ${e.message}',

     

       
269
       
-
       
          originalError: e,

     

       
270
       
-
       
        );

     

       
271
       
 
       
    }

     

       
272
       
 
       
  }

     

       
273
       
 
       


     

···

       
15
       
 
       
/// rotates tokens automatically (~1 hour expiry), and caching tokens would

     

       
16
       
 
       
/// cause 401 errors after the first token expires.

     

       
17
       
 
       
class CovesApiService {

     

       
0
       
 
       

     

       
18
       
 
       
  CovesApiService({Future<String?> Function()? tokenGetter})

     

       
19
       
 
       
    : _tokenGetter = tokenGetter {

     

       
20
       
 
       
    _dio = Dio(

     
···

       
263
       
 
       
      case DioExceptionType.cancel:

     

       
264
       
 
       
        throw ApiException('Request cancelled', originalError: e);

     

       
265
       
 
       
      default:

     

       
266
       
+
       
        throw ApiException('Unknown error: ${e.message}', originalError: e);

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
267
       
 
       
    }

     

       
268
       
 
       
  }

     

       
269
       
 
       


     

···

       
68
       
 
       
  /// Fetch a DID document from the PLC directory

     

       
69
       
 
       
  Future<Map<String, dynamic>> _fetchDIDDocument(String did) async {

     

       
70
       
 
       
    try {

     

       
71
       
-
       
      final response =

     

       
72
       
-
       
          await _dio.get('https://plc.directory/$did');

     

       
73
       
 
       


     

       
74
       
 
       
      if (response.statusCode != 200) {

     

       
75
       
 
       
        throw Exception('Failed to fetch DID document: ${response.statusCode}');

     

···

       
68
       
 
       
  /// Fetch a DID document from the PLC directory

     

       
69
       
 
       
  Future<Map<String, dynamic>> _fetchDIDDocument(String did) async {

     

       
70
       
 
       
    try {

     

       
71
       
+
       
      final response = await _dio.get('https://plc.directory/$did');

     

       
0
       
 
       

     

       
72
       
 
       


     

       
73
       
 
       
      if (response.statusCode != 200) {

     

       
74
       
 
       
        throw Exception('Failed to fetch DID document: ${response.statusCode}');

     

···

       
2
       
 
       
import 'package:flutter_svg/flutter_svg.dart';

     

       
3
       
 
       


     

       
4
       
 
       
class CovesLogo extends StatelessWidget {

     

       
5
       
-
       


     

       
6
       
 
       
  const CovesLogo({super.key, this.size = 150, this.useColorVersion = false});

     

       
7
       
 
       
  final double size;

     

       
8
       
 
       
  final bool useColorVersion;

     

···

       
2
       
 
       
import 'package:flutter_svg/flutter_svg.dart';

     

       
3
       
 
       


     

       
4
       
 
       
class CovesLogo extends StatelessWidget {

     

       
0
       
 
       

     

       
5
       
 
       
  const CovesLogo({super.key, this.size = 150, this.useColorVersion = false});

     

       
6
       
 
       
  final double size;

     

       
7
       
 
       
  final bool useColorVersion;

     

···

       
3
       
 
       
enum ButtonVariant { solid, outline, tertiary }

     

       
4
       
 
       


     

       
5
       
 
       
class PrimaryButton extends StatelessWidget {

     

       
6
       
-
       


     

       
7
       
 
       
  const PrimaryButton({

     

       
8
       
 
       
    super.key,

     

       
9
       
 
       
    required this.title,

     

···

       
3
       
 
       
enum ButtonVariant { solid, outline, tertiary }

     

       
4
       
 
       


     

       
5
       
 
       
class PrimaryButton extends StatelessWidget {

     

       
0
       
 
       

     

       
6
       
 
       
  const PrimaryButton({

     

       
7
       
 
       
    super.key,

     

       
8
       
 
       
    required this.title,

     

···

       
10
       
 
       


     

       
11
       
 
       
// Generate mocks for OAuthService and OAuthSession only

     

       
12
       
 
       
@GenerateMocks([OAuthService, OAuthSession])

     

       
13
       
-
       


     

       
14
       
 
       
void main() {

     

       
15
       
 
       
  TestWidgetsFlutterBinding.ensureInitialized();

     

       
16
       
 
       


     
···

       
206
       
 
       
      // that are not exported from atproto_oauth_flutter package.

     

       
207
       
 
       
      // These tests would need integration testing or a different approach.

     

       
208
       
 
       


     

       
209
       
-
       
      test(

     

       
210
       
-
       
        'should return null when not authenticated '

     

       
211
       
-
       
        '(skipped - needs integration test)',

     

       
212
       
-
       
        () async {

     

       
213
       
 
       
        // This test is skipped as it requires mocking internal OAuth classes

     

       
214
       
 
       
        // that cannot be mocked with mockito

     

       
215
       
-
       
      }, skip: true,);

     

       
216
       
 
       


     

       
217
       
-
       
      test(

     

       
218
       
-
       
        'should sign out user if token refresh fails '

     

       
219
       
-
       
        '(skipped - needs integration test)',

     

       
220
       
-
       
        () async {

     

       
221
       
 
       
        // This test demonstrates the critical fix for issue #7

     

       
222
       
 
       
        // Token refresh failure should trigger sign out

     

       
223
       
 
       
        // Skipped as it requires mocking internal OAuth classes

     

       
224
       
-
       
      }, skip: true,);

     

       
225
       
 
       
    });

     

       
226
       
 
       


     

       
227
       
 
       
    group('State Management', () {

     

···

       
10
       
 
       


     

       
11
       
 
       
// Generate mocks for OAuthService and OAuthSession only

     

       
12
       
 
       
@GenerateMocks([OAuthService, OAuthSession])

     

       
0
       
 
       

     

       
13
       
 
       
void main() {

     

       
14
       
 
       
  TestWidgetsFlutterBinding.ensureInitialized();

     

       
15
       
 
       


     
···

       
205
       
 
       
      // that are not exported from atproto_oauth_flutter package.

     

       
206
       
 
       
      // These tests would need integration testing or a different approach.

     

       
207
       
 
       


     

       
208
       
+
       
      test('should return null when not authenticated '

     

       
209
       
+
       
          '(skipped - needs integration test)', () async {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
210
       
 
       
        // This test is skipped as it requires mocking internal OAuth classes

     

       
211
       
 
       
        // that cannot be mocked with mockito

     

       
212
       
+
       
      }, skip: true);

     

       
213
       
 
       


     

       
214
       
+
       
      test('should sign out user if token refresh fails '

     

       
215
       
+
       
          '(skipped - needs integration test)', () async {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
216
       
 
       
        // This test demonstrates the critical fix for issue #7

     

       
217
       
 
       
        // Token refresh failure should trigger sign out

     

       
218
       
 
       
        // Skipped as it requires mocking internal OAuth classes

     

       
219
       
+
       
      }, skip: true);

     

       
220
       
 
       
    });

     

       
221
       
 
       


     

       
222
       
 
       
    group('State Management', () {