[subhankarmaiti]

Bumps Auth0.Android from 4.1.0 to 4.2.1 and updates the version in the migration guide.

Apps that upgrade from react-native-auth0 5.4.0 or older (Auth0.Android 3.12.x and earlier) lose their stored session on the first launch. getCredentials() rejects with CRYPTO_EXCEPTION and the saved credentials are deleted.

The cause was in Auth0.Android 4.1.0 and 4.2.0. When the old PKCS1 RSA key rejected the OAEP cipher, the decrypt step deleted the RSA and AES keys before the PKCS1 migration could run, so there was nothing left to migrate. 4.2.1 (auth0/Auth0.Android#1110) stops deleting the keys there and lets the migration run first. Keys that fail the migration are still regenerated as before.

The same fix shipped for v5 in #1706.

[coderabbitai]

Caution

Review failed

The pull request is closed.

📝 Summary

Summary by CodeRabbit

• Documentation
  • Updated the Android migration guidance to reference Auth0.Android 4.2.1 instead of 4.1.0.
• Chores
  • Updated the Android authentication library to version 4.2.1. This keeps the build aligned with the version listed in the migration guidance. No user-facing behavior changes are noted in this update.

The Android build dependency changes from Auth0.Android 4.1.0 to 4.2.1. The migration guide now specifies the same version.

Changes: Android SDK version

Layer / File(s)	Summary
Update Auth0.Android version android/build.gradle, MIGRATION_GUIDE.md	The Android dependency and migration guidance change from version 4.1.0 to 4.2.1.

Priority: Not assessed

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Bug fix

Possibly related PRs

• auth0/react-native-auth0#1695: Introduced the v6 Android dependency and migration guidance that this PR updates.
• auth0/react-native-auth0#1702: Updated the same Android dependency from 4.1.0 to 4.2.0.

Suggested reviewers: utkrishtsahu

Merge Risk: Minimal · up to de4c9

No actionable merge-blocking risk remains in the reviewed changes.

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}