[utkrishtsahu]

📋 Changes

• Bumps the bundled Auth0.Android dependency from 3.21.0 to 3.21.1 in auth0_flutter/android/build.gradle.

Why: Auth0.Android 3.21.1 fixes credential storage failing with INCOMPATIBLE_DEVICE on newer Keystore2 hardware (Android 16+, e.g. Pixel 10, Galaxy S26). The RSA key used by SecureCredentialsManager was generated without explicitly authorizing MGF1 digests, which the newer firmware strictly enforces, so saving credentials threw on those devices. Auth0.Android now authorizes both SHA-1 and SHA-256, and handles an existing stale key's MGF1 mismatch by recreating it.

This plugin delegates credential storage to Auth0.Android, so apps using auth0_flutter on affected devices hit the same failure until this dependency is bumped.

No Dart or Kotlin source changes, and no public API changes.

References

• https://github.com/auth0/Auth0.Android/releases/tag/3.21.1
• fix(storage): authorize MGF1 digest to prevent INCOMPATIBLE_DEVICE on…3.x Auth0.Android#1048

🎯 Testing

Run locally

• :auth0_flutter:assembleDebug builds against com.auth0.android:auth0:3.21.1.
• :auth0_flutter:testDebugUnitTest: all 362 Android unit tests pass (0 failures, 0 errors, 0 skipped).

Summary by CodeRabbit

• Updates
  • Updated the Android authentication library to version 3.21.1.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository: auth0/auth0-flutter/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 944d287f-a846-4759-a29e-20514c886729

📥 Commits

Reviewing files that changed from the base of the PR and between ec3a622 and d3d0dab.

📒 Files selected for processing: 1

• auth0_flutter/android/build.gradle

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Walkthrough

The Android module updates its Auth0 Android dependency from version 3.21.0 to 3.21.1.

Changes

Android dependency update

Layer / File(s)	Summary
Update Auth0 Android dependency auth0_flutter/android/build.gradle	The dependency version changes from 3.21.0 to 3.21.1.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Bug fix

Suggested reviewers: nandanprabhu

Merge Risk: ⚪ Minimal · up to d3d0d

The Android module now uses Auth0.Android 3.21.1, with no concrete compatibility issue identified for the existing authentication or DPoP paths. No identified issue blocks merging.

### Architecture Summary

Architecture risk: 🔵 Low · up to d3d0d

The change affects 1 system.

Changed systems: auth0_flutter

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — auth0_flutter (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in auth0_flutter/android/build.gradle: The Auth0 Android dependency version changes from 3.21.0 to 3.21.1.

Pre-merge checks: 5

Passed checks: 5 passed

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly identifies the Android dependency bump to Auth0.Android 3.21.1 and the related Keystore2 INCOMPATIBLE_DEVICE fix.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches: 💡 1

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

🛠️ Fix failing CI checks: 💡

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}