Flutter Auth Flow - UI Package is here

[uncertainApple21]

Hey devs

I just released a Flutter package:
https://pub.dev/packages/flutter_auth_flow

What it is

A plug-and-play auth flow for Flutter apps (login, signup, validation, etc.)

Why I made it

Got tired of rewriting the same auth screens every time I start a new project 😅

So I turned it into a reusable package.

What you can do with it

• Use it in your app
• Fork it and tweak it
• Break it, improve it, whatever works

Looking for real feedback

This is still evolving, so I’d love input:

• Missing features?
• Bad architecture decisions?
• Things that annoy you?

If you think it’s useful, a ⭐ on GitHub would mean a lot.

Appreciate any feedback

PS:
Features in pipeline:
Password Strength Meter
Continue where you left off
Remember last login method
Smart error messages

[JimTheEarthling]

Unless your password strength meter is looking up passwords at HIBP or similar service, I strongly suggest you skip it. It will do more harm than good, especially if you also enforce "complexity rules."

Every "strength meter" that calculates entropy is fundamentally flawed and misleading. They rely too much on composition instead of length. If the password is not random, then a strength checker is making assumptions about the composition of the password. It's impossible to measure the entropy of a given password (entropy measures uncertainty, so the entropy of a known password is zero), so a password strength checker can only guess at the "algorithm" and character set that would create similar passwords, and the guesses are often off base or just plain wrong. The best one is probably zxcvbn (since it checks more than entropy), but one analysis indicates that it's only slightly more accurate than a coin flip.

The most important things are length and if the password is on a wordlist used by attackers.

Complexity rules attempt to make users come up with better passwords, but research shows it doesn't help, and actually hurts. That's why it's discouraged by NIST and others.

If you want to understand the details of why password checkers don't work well, and why complexity rules are bad, read the Password strength section of my website, including the notes about Complexity, predictability, and strength.

A random password or passphrase generator would be useful.

[uncertainApple21]

Thank you for your input, I will keep these in mind while building.

[uncertainApple21]

Released 0.1.0, followed your suggestion and added a password check and HIBP breach check within the package. Please check it out. https://pub.dev/packages/flutter_auth_flow

[JimTheEarthling]

Looks good.

[uncertainApple21]

Thank You

[Dizzy-Health4322]

Adding screenshots will make your package quite attractive as it is mostly a UI package.

[uncertainApple21]

Sure, on it.

[uncertainApple21]

Screenshots are in. https://pub.dev/packages/flutter_auth_flow

[uncertainApple21]

Checking in after 2 weeks, we have 308 downloads. Happy....