[utkrishtsahu]

📋 Changes

• Bumps the bundled Auth0.Android dependency from 3.21.2 to 3.21.3 in auth0_flutter/android/build.gradle.

Why: Auth0.Android 3.21.3 keeps the RSA key for the PKCS1 → OAEP migration when it hits a padding mismatch (#1107).

In 3.21.1/3.21.2, the MGF1 fix (#1048) deleted the RSA key on a padding mismatch before the migration could use it. New keys were then generated and the stored credentials were cleared. This logged out users whose credentials were saved by Auth0.Android 3.12.1 or older (including 2.x) on the first launch after upgrading.

For auth0_flutter, this affects apps upgrading from releases that shipped those older Auth0.Android versions (auth0_flutter 1.x on Auth0.Android 2.x, and early 2.x on 3.11/3.12). The released 2.6.2 (Auth0.Android 3.21.0) is not affected; this bump makes sure the upcoming 2.7.0 isn't either.

No Dart or Kotlin source changes, and no public API changes. The fix is internal to Auth0.Android's CryptoUtil; the plugin uses SecureCredentialsManager, whose API is unchanged.

🎯 Testing

Manual upgrade test (Pixel 10, Android 17)

• Installed the auth0_flutter 2.1.0 example (Auth0.Android 3.12.0), logged in, and stored credentials.
• Upgraded in place (no uninstall) and read the stored credentials on launch:
  • Auth0.Android 3.21.2 (main): reproduced the bug. No RSA key found for migration → Could not recover AES key. Deleting corrupted keys; stored credentials wiped.
  • Auth0.Android 3.21.3 (this PR): PKCS1 migration successful → AES key re-encrypted with OAEP and stored; stored credentials returned, and a second launch reads them without migrating.

Summary by CodeRabbit

• Chores
  • This update includes no user-facing changes. Existing features and user workflows remain unchanged, and no new capabilities or behavioral changes are included in this release.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: auth0/auth0-flutter
• Branch: main
• File: .coderabbit.yaml
• Commit: 96cda32
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: db6948e5-97ab-4d20-9b64-7827d48258b0

Commits

Reviewing files that changed from the base of the PR and between 96cda32 and 7fe55dc.

Files selected for processing: 1

• auth0_flutter/android/build.gradle

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Walkthrough

The Android library dependency on com.auth0.android:auth0 changes from version 3.21.2 to 3.21.3.

Changes

Android dependency update

Layer / File(s)	Summary
Auth0.Android dependency version auth0_flutter/android/build.gradle	The declared com.auth0.android:auth0 implementation dependency changes from 3.21.2 to 3.21.3.

Priority: Normal

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Bug fix

Possibly related PRs

• auth0/auth0-flutter#968: This PR also updates the Android Auth0 dependency, from 3.21.2 to 3.21.3.
• auth0/auth0-flutter#970: This release-preparation PR includes the Auth0.Android 3.21.2 update that this change advances to 3.21.3.

Suggested reviewers: subhankarmaiti

Merge Risk: Minimal · up to 7fe55

The Auth0.Android version bump is limited to the declared dependency and is ready to merge with normal checks.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly describes the Android dependency bump and its purpose during PKCS1 migration.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}