appwrite-dart

Install the appwrite package, create a Client with your endpoint and project ID, then use the Account service. Call createEmailPasswordSession for email login or createOAuth2Session for providers like Google, and account.get() to fetch the current user.

Use the TablesDB service's listRows method with Query helpers such as Query.equal, Query.greaterThan, Query.orderDesc, and Query.limit. Prefer cursor pagination with Query.cursorAfter for large datasets, and use named parameters like databaseId and tableId.

The appwrite package is the client-side SDK for Flutter apps and uses user sessions. The dart_appwrite package is the server-side SDK that authenticates with an API key for admin operations like user management and database administration.

Use TablesDB for all new code, as the Databases class is deprecated. Only use Databases when maintaining an existing codebase that already relies on it or when explicitly required.

Appwrite grants no access by default, so resources without explicit permissions are inaccessible even to their creator. Set permissions with Permission and Role helpers, and avoid combining Role.any() with write, update, or delete on sensitive data.

Use two clients: an admin client with an API key to create sessions, and a per-request session client that reads the a_session_<PROJECT_ID> cookie. Set the cookie with HttpOnly, Secure, and SameSite=Strict flags to prevent XSS.