[utkrishtsahu]

• All new/changed/fixed functionality is covered by tests (or N/A)
• I have added documentation for all new/changed functionality (or N/A)

📋 Changes

• Bumps the bundled Auth0.Android dependency from 4.2.0 to 4.2.1 in auth0_flutter/android/build.gradle.

Why: Auth0.Android 4.2.1 includes two fixes:

• Keep the RSA key for the PKCS1 → OAEP migration on a padding mismatch. In 4.2.0 (like 3.21.1/3.21.2), the RSA key was deleted before the migration could use it, so users whose credentials were saved by Auth0.Android 3.12.1 or older (including 2.x) were logged out on the first launch after upgrading. This is the 4.x counterpart of the 3.21.3 fix shipped in auth0_flutter 2.7.0 (fix(android): bump Auth0.Android to 3.21.3 to keep RSA key for PKCS1 migration on padding mismatch #971).
• Keep the scope's case when appending openid. Previously every scope was lowercased, so mixed-case API permissions (e.g. read:Messages) were requested under a different name and not granted. Scopes passed from Flutter are now sent as written.

No Dart or Kotlin source changes, and no public API changes.

🎯 Testing

• :auth0_flutter:testDebugUnitTest against com.auth0.android:auth0:4.2.1: 371 tests passed, 0 failures (confirmed via :auth0_flutter:dependencies).
• No plugin test asserts on mixed-case scopes, so the scope-case change doesn't affect existing tests.
• The upgrade fix itself was verified manually on a Pixel 10 (Android 17) with the 3.x-line equivalent (3.21.3, fix(android): bump Auth0.Android to 3.21.3 to keep RSA key for PKCS1 migration on padding mismatch #971): credentials stored by Auth0.Android 3.12.0 survive the upgrade (PKCS1 migration successful), whereas 3.21.2/4.2.0 wipe them.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review: 3

• main
• beta-release/.*
• release/.*

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: auth0/auth0-flutter
• Branch: develop/v3.0
• File: .coderabbit.yaml
• Commit: 8a2891c
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: d6c5bd95-368b-497e-8e54-1409d8374dc1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}