Skip to content

fix: bump Auth0.Android to 3.21.2 for biometric failure fix - #968

Merged
utkrishtsahu merged 1 commit into
mainfrom
chore/bump-auth0-android-3.21.2
Oct 23, 2026
Merged

utkrishtsahu merged 1 commit into
mainfrom
chore/bump-auth0-android-3.21.2

Conversation

@utkrishtsahu

@utkrishtsahu utkrishtsahu commented Oct 23, 2026 •

Copy link
Copy Markdown
Contributor
  • All new/changed/fixed functionality is covered by tests (or N/A)
  • I have added documentation for all new/changed functionality (or N/A)

📋 Changes

  • Bumps the bundled Auth0.Android dependency from 3.21.1 to 3.21.2 in auth0_flutter/android/build.gradle.
  • Bumps the example app's auth0-spa-js from 2.24.0 to 2.24.1 in auth0_flutter/example/web/index.html. The README's script tag uses the /2.24/ CDN path, which already serves 2.24.1, so the README is unchanged.

Why: Auth0.Android 3.21.2 fixes SecureCredentialsManager with local authentication reporting an unrecognized biometric as a final failure. BiometricPrompt calls onAuthenticationFailed() when it reads a biometric it doesn't recognize, but the prompt stays open and the real result comes later. Auth0.Android was treating that callback as a failure, so a single getCredentials() / getApiCredentials() call could produce a failure and then a success.

This plugin passes those results to Dart over the method channel. Apps using auth0_flutter with localAuthentication on Android could therefore see credentials() fail even when the user then authenticated successfully, for example via the device credential fallback.

No Dart or Kotlin source changes, and no public API changes.

🎯 Testing

  • :auth0_flutter:compileDebugUnitTestKotlin builds against com.auth0.android:auth0:3.21.2 (confirmed via :auth0_flutter:dependencies).

Auth0.Android 3.21.2 stops reporting an unrecognized biometric as a final
failure, so credentials reads with local authentication no longer fail
when the user retries and authenticates successfully.

Also bumps the example app's auth0-spa-js to 2.24.1.

Co-Authored-By: Claude <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
📥 Commits

Reviewing files that changed from the base of the PR and between 70d193c and ccae73a.

⛔ Files ignored due to path filters: 1
  • auth0_flutter/example/web/index.html is excluded by !**/example/**
📒 Files selected for processing: 1
  • auth0_flutter/android/build.gradle

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Walkthrough

The Android module now declares com.auth0.android:auth0 version 3.21.2 instead of 3.21.1.

Changes

Android dependency update

Layer / File(s) Summary
Update Auth0 Android dependency
auth0_flutter/android/build.gradle
The declared Auth0 Android dependency version changes from 3.21.1 to 3.21.2.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: nandanprabhu

Merge Risk: ⚪ Minimal · up to ccae7

The dependency-only update is mergeable with no identified actionable risk.

Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Title check Passed The title clearly identifies the primary change: updating Auth0.Android to 3.21.2 to address biometric authentication failure behavior. It is concise and specific.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@utkrishtsahu utkrishtsahu changed the title af: bump Auth0.Android to 3.21.2 for biometric failure fix fix: bump Auth0.Android to 3.21.2 for biometric failure fix Oct 23, 2026
@utkrishtsahu
utkrishtsahu merged commit 96cda32 into main Oct 23, 2026
19 checks passed
@utkrishtsahu
utkrishtsahu deleted the chore/bump-auth0-android-3.21.2 branch October 23, 2026 06:51
@utkrishtsahu utkrishtsahu mentioned this pull request Oct 23, 2026

This branch was successfully deployed

1 active deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants