CredentialsManager user info/ID token contents accessible via flutter SDK #607

NandanPrabhu · 2025-06-26T05:28:16Z

All new/changed/fixed functionality is covered by tests (or N/A)
I have added documentation for all new/changed functionality (or N/A)

📋 Changes

This PR exposes api to access ID Token contents via Credentials Manager in flutter SDK
GH issue #378 will be addressed via this PR

📎 References

🎯 Testing

(cherry picked from commit 1cb05d8)

(cherry picked from commit 1ebc64c)

pmathew92 · 2025-06-26T06:10:01Z

auth0_flutter_platform_interface/lib/src/user_info_credentials.dart

@@ -0,0 +1,111 @@
+class UserIdentity {


We already have a User_Profile class defined . Please re use that

pmathew92 · 2025-06-26T06:19:38Z

auth0_flutter/lib/src/mobile/credentials_manager.dart

  });

-  Future<bool> storeCredentials(final Credentials credentials);
+  Future<UserInfo> getIDTokenContents();


Shouldn't this be of nullable type ,in the scneario if the credentials aren't available and someone invokes this api ?

Widcket · 2025-06-26T11:26:51Z

auth0_flutter_platform_interface/lib/src/credentials-manager/credentials_manager_platform.dart

  }

+  /// Retrieves the credentials from the native storage.
+  Future<UserInfo> getIDTokenContents(final CredentialsManagerRequest request) {


The Credentials class uses a user property for this. Since this method here is exposing exactly the same functionality (parsing and returning the info contained in the ID token), we should stick to the same naming convention, otherwise it could be confusing. Using different names for the same thing may suggest these are actually different things, or that there is a substantive difference.

Widcket · 2025-06-26T19:55:11Z

auth0_flutter/darwin/Classes/CredentialsManager/CredentialsManagerUserInfoMethodHandler.swift

@@ -0,0 +1,16 @@
+


There are a couple of symlinks missing. See https://github.com/auth0/auth0-flutter/actions/runs/15893748250/job/44821016570?pr=607

Widcket

Please also add Dart tests and Swift tests.

sanchitmehta94

@NandanPrabhu Let’s resolve the open comments, then we can test and merge this to close the GH issue

…/actions/setup-darwin (#709) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/actions/setup-darwin (#710) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/actions/setup-darwin (#713) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/actions/setup-darwin (#716) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/actions/setup-darwin (#719) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.281.0 to 1.282.0. - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](ruby/setup-ruby@675dd7b...4fc31e1) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-version: 1.282.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

…/actions/setup-darwin (#722) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/actions/setup-darwin (#725) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

sanchitmehta94 · 2026-02-02T05:07:35Z

auth0_flutter/lib/src/mobile/credentials_manager.dart

  Future<UserInfo> getIDTokenContents() =>
      CredentialsManagerPlatform.instance.getIDTokenContents(_createApiRequest(null));
 =======
  /// Fetches new set of credentials each time and stores them in storage.


This has conflicting files could we fix this @pmathew92

Copilot

Pull request overview

This PR adds a new user() method to the Credentials Manager that allows accessing user profile information from cached credentials without attempting to refresh them. This addresses issue #378, enabling offline-first apps to access user identity information even when access tokens have expired and the device is offline.

Changes:

Adds user() method to CredentialsManager that returns UserProfile from cached credentials without refresh
Implements platform-specific handlers for iOS/macOS (Swift) and Android (Kotlin)
Adds comprehensive test coverage across all layers

Reviewed changes

Copilot reviewed 20 out of 20 changed files in this pull request and generated 9 comments.

Show a summary per file

File	Description
auth0_flutter_platform_interface/lib/src/user_info_credentials.dart	Defines UserInfo and UserIdentity classes (appears unused)
auth0_flutter_platform_interface/lib/src/credentials-manager/credentials_manager_platform.dart	Adds user() and getIDTokenContents() method declarations to platform interface
auth0_flutter_platform_interface/lib/src/credentials-manager/method_channel_credentials_manager.dart	Implements user() method that fetches profile from native storage
auth0_flutter_platform_interface/lib/auth0_flutter_platform_interface.dart	Exports new UserInfo class
auth0_flutter/lib/src/mobile/credentials_manager.dart	Adds user() method to CredentialsManager interface (contains merge conflict)
auth0_flutter/darwin/Classes/CredentialsManager/CredentialsManagerUserInfoMethodHandler.swift	Swift handler that accesses credentialsManager.user property
auth0_flutter/darwin/Classes/CredentialsManager/CredentialsManagerHandler.swift	Registers userInfo method handler (has duplicate case)
auth0_flutter/android/src/main/kotlin/.../GetCredentialsUserInfoRequestHandler.kt	Kotlin handler that accesses credentialsManager.userProfile property
auth0_flutter/android/src/main/kotlin/.../Auth0FlutterPlugin.kt	Registers the GetCredentialsUserInfoRequestHandler
auth0_flutter_platform_interface/test/method_channel_credentials_manager_test.dart	Comprehensive tests for user() method at platform interface layer
auth0_flutter/test/mobile/credentials_manager_test.dart	Tests for user() method in DefaultCredentialsManager
auth0_flutter/example/ios/Tests/.../CredentialsManagerUserInfoMethodHandlerTests.swift	Swift unit tests for the iOS/macOS handler
auth0_flutter/android/src/test/kotlin/.../GetCredentialsUserInfoRequestHandlerTest.kt	Kotlin unit tests for Android handler
Various mock files	Auto-generated mock updates for new user() method

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-02T05:10:26Z

auth0_flutter/test/mobile/web_authentication_test.mocks.dart

-// Mocks generated by Mockito 5.4.5 from annotations
-// in auth0_flutter/test/mobile/web_authentication_test.dart.
+// Mocks generated by Mockito 5.4.4 from annotations
+// in auth0_flutter/example/ios/.symlinks/plugins/auth0_flutter/test/mobile/web_authentication_test.dart.


The mock file header indicates it was generated from an unusual path: 'auth0_flutter/example/ios/.symlinks/plugins/auth0_flutter/test/mobile/web_authentication_test.dart' instead of the expected 'auth0_flutter/test/mobile/web_authentication_test.dart'. This suggests the mocks were regenerated from within a symlinked directory structure, which is typically part of Flutter example project builds. While this doesn't affect functionality, it's better practice to regenerate mocks from the package root directory to maintain cleaner file metadata.

Suggested change

// in auth0_flutter/example/ios/.symlinks/plugins/auth0_flutter/test/mobile/web_authentication_test.dart.

// in auth0_flutter/test/mobile/web_authentication_test.dart.

Copilot · 2026-02-02T05:10:26Z

auth0_flutter/lib/src/mobile/credentials_manager.dart

    final Map<String, String> parameters = const {},
  });

+  Future<UserInfo> getIDTokenContents();


The abstract CredentialsManager interface declares getIDTokenContents() method that returns Future, but this method is never implemented in DefaultCredentialsManager (due to the merge conflict). Additionally, UserInfo class is defined but unused. Since the actual implementation uses user() method returning UserProfile, either getIDTokenContents() should be removed from the interface, or it should be properly implemented. Having both methods in the interface creates confusion about which API consumers should use.

Copilot · 2026-02-02T05:10:27Z

auth0_flutter/darwin/Classes/CredentialsManager/CredentialsManagerHandler.swift

        case .clear: return CredentialsManagerClearMethodHandler(credentialsManager: credentialsManager)
+        case .userInfo: return CredentialsManagerUserInfoMethodHandler(credentialsManager: credentialsManager)
        case .renew: return CredentialsManagerRenewMethodHandler(credentialsManager: credentialsManager)
+        case .userInfo: return CredentialsManagerUserInfoMethodHandler(credentialsManager: credentialsManager)


The userInfo case is duplicated in the switch statement. Line 134 and line 136 both handle the .userInfo case, both returning CredentialsManagerUserInfoMethodHandler. One of these cases should be removed to avoid compilation errors.

Suggested change

case .userInfo: return CredentialsManagerUserInfoMethodHandler(credentialsManager: credentialsManager)

Copilot · 2026-02-02T05:10:27Z

auth0_flutter_platform_interface/lib/src/credentials-manager/credentials_manager_platform.dart

+  /// Retrieves the credentials from the native storage.
+  Future<UserInfo> getIDTokenContents(final CredentialsManagerRequest request) {
+    throw UnimplementedError('getIDTokenContents() has not been implemented');
+  }
+


The getIDTokenContents() method is declared in the CredentialsManagerPlatform interface (line 36) but has no implementation in MethodChannelCredentialsManager. Additionally, it's referenced in credentials_manager.dart (line 71) but this implementation is incomplete and appears to be orphaned code that should have been removed. The method should either be fully implemented or removed entirely.

Suggested change

/// Retrieves the credentials from the native storage.

Future<UserInfo> getIDTokenContents(final CredentialsManagerRequest request) {

throw UnimplementedError('getIDTokenContents() has not been implemented');

}

Copilot · 2026-02-02T05:10:27Z

auth0_flutter/lib/src/mobile/credentials_manager.dart

    final Map<String, String> parameters = const {},
  });

+  Future<UserInfo> getIDTokenContents();


There's a discrepancy between the PR description and implementation. The PR description states it will "expose api to access ID Token contents via Credentials Manager" and references getIDTokenContents. However, the actual implementation adds a user() method that returns UserProfile from the stored credentials (without refresh). The getIDTokenContents() method is declared but never implemented. The implementation should either complete getIDTokenContents() or remove it and update documentation to reflect that user() is the intended API.

Copilot · 2026-02-02T05:10:27Z

auth0_flutter_platform_interface/lib/src/user_info_credentials.dart

+factory UserInfo.fromJson(final Map<String, dynamic> json) =>
+UserInfo(
+id: json['id'] as String?,
+name: json['name'] as String?,
+nickname: json['nickname'] as String?,
+pictureURL: json['pictureURL'] as String?,
+email: json['email'] as String?,
+isEmailVerified: json['isEmailVerified'] as bool?,
+familyName: json['familyName'] as String?,
+// Handle date parsing
+createdAt: json['createdAt'] != null
+? DateTime.parse(json['createdAt'] as String)
+    : null,
+// Handle list of UserIdentity
+identities: (json['identities'] as List<dynamic>?)
+    ?.map((final e) => UserIdentity.fromJson(e as Map<String, dynamic>))
+    .toList(),
+extraInfo: Map<String, dynamic>.from(json['extraInfo'] as Map),
+userMetadata: Map<String, dynamic>.from(json['userMetadata'] as Map),
+appMetadata: Map<String, dynamic>.from(json['appMetadata'] as Map),
+givenName: json['givenName'] as String?,
+);


The UserInfo class defined in this file appears to be unused. The actual user method returns UserProfile, not UserInfo. Additionally, the UserInfo class has potential issues: the fromJson factory method (lines 89-110) doesn't handle potential null values safely when calling Map.from on lines 106-108, which could throw exceptions if extraInfo, userMetadata, or appMetadata are null.

Suggested change

factory UserInfo.fromJson(final Map<String, dynamic> json) =>

UserInfo(

id: json['id'] as String?,

name: json['name'] as String?,

nickname: json['nickname'] as String?,

pictureURL: json['pictureURL'] as String?,

email: json['email'] as String?,

isEmailVerified: json['isEmailVerified'] as bool?,

familyName: json['familyName'] as String?,

// Handle date parsing

createdAt: json['createdAt'] != null

? DateTime.parse(json['createdAt'] as String)

: null,

// Handle list of UserIdentity

identities: (json['identities'] as List<dynamic>?)

?.map((final e) => UserIdentity.fromJson(e as Map<String, dynamic>))

.toList(),

extraInfo: Map<String, dynamic>.from(json['extraInfo'] as Map),

userMetadata: Map<String, dynamic>.from(json['userMetadata'] as Map),

appMetadata: Map<String, dynamic>.from(json['appMetadata'] as Map),

givenName: json['givenName'] as String?,

);

factory UserInfo.fromJson(final Map<String, dynamic> json) {

final dynamic extraInfoRaw = json['extraInfo'];

final dynamic userMetadataRaw = json['userMetadata'];

final dynamic appMetadataRaw = json['appMetadata'];

final Map<String, dynamic>? extraInfo =

extraInfoRaw is Map ? Map<String, dynamic>.from(extraInfoRaw) : null;

final Map<String, dynamic>? userMetadata =

userMetadataRaw is Map ? Map<String, dynamic>.from(userMetadataRaw) : null;

final Map<String, dynamic>? appMetadata =

appMetadataRaw is Map ? Map<String, dynamic>.from(appMetadataRaw) : null;

return UserInfo(

id: json['id'] as String?,

name: json['name'] as String?,

nickname: json['nickname'] as String?,

pictureURL: json['pictureURL'] as String?,

email: json['email'] as String?,

isEmailVerified: json['isEmailVerified'] as bool?,

familyName: json['familyName'] as String?,

// Handle date parsing

createdAt: json['createdAt'] != null

? DateTime.parse(json['createdAt'] as String)

: null,

// Handle list of UserIdentity

identities: (json['identities'] as List<dynamic>?)

?.map((final e) => UserIdentity.fromJson(e as Map<String, dynamic>))

.toList(),

extraInfo: extraInfo,

userMetadata: userMetadata,

appMetadata: appMetadata,

givenName: json['givenName'] as String?,

);

Copilot · 2026-02-02T05:10:28Z

...utter_platform_interface/lib/src/credentials-manager/method_channel_credentials_manager.dart

  }

+  /// Fetches the user profile associated with the stored credentials.
+  /// Returns null is no credentials are stored


The comment has a typo: "Returns null is no credentials are stored" should be "Returns null if no credentials are stored".

Suggested change

/// Returns null is no credentials are stored

/// Returns null if no credentials are stored

Copilot · 2026-02-02T05:10:28Z

auth0_flutter_platform_interface/lib/src/credentials-manager/credentials_manager_platform.dart

    throw UnimplementedError('getCredentials() has not been implemented');
  }

+  /// Retrieves the credentials from the native storage.


The documentation comment states "Retrieves the credentials from the native storage" which is the same comment used for getCredentials() method. This is misleading since getIDTokenContents should retrieve ID token contents/claims, not full credentials. The comment should be updated to accurately describe what this method does, or the method should be removed if it's not meant to be part of the final implementation.

Suggested change

/// Retrieves the credentials from the native storage.

/// Retrieves the ID token contents (claims) from the native storage.

NandanPrabhu added 2 commits June 26, 2025 10:56

SDK-6070 flutter changes

002b8d6

(cherry picked from commit 1cb05d8)

method channel for accessing user info

ec84b59

(cherry picked from commit 1ebc64c)

NandanPrabhu requested a review from a team as a code owner June 26, 2025 05:28

NandanPrabhu temporarily deployed to internal June 26, 2025 05:28 — with GitHub Actions Inactive

NandanPrabhu had a problem deploying to internal June 26, 2025 05:28 — with GitHub Actions Failure

NandanPrabhu temporarily deployed to internal June 26, 2025 05:28 — with GitHub Actions Inactive

pmathew92 reviewed Jun 26, 2025

View reviewed changes

Widcket reviewed Jun 26, 2025

View reviewed changes

sanchitmehta94 reviewed Dec 19, 2025

View reviewed changes

Merge branch 'main' into SDK-6070

972008a

NandanPrabhu had a problem deploying to internal December 22, 2025 03:57 — with GitHub Actions Failure

NandanPrabhu mentioned this pull request Jan 16, 2026

Allow accessing credentials without an attempt to refresh #378

Open

5 tasks

grebdems mentioned this pull request Jan 19, 2026

chore : added new properties to web_authentication_exception and credentials_manager_exception class #609

Merged

dependabot bot added 8 commits February 2, 2026 10:13

build(deps): bump ruby/setup-ruby from 1.273.0 to 1.274.0 in /.github…

e4acf09

…/actions/setup-darwin (#709) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build(deps): bump ruby/setup-ruby from 1.274.0 to 1.275.0 in /.github…

bf858a5

…/actions/setup-darwin (#710) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build(deps): bump ruby/setup-ruby from 1.275.0 to 1.278.0 in /.github…

1970f42

…/actions/setup-darwin (#713) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build(deps): bump ruby/setup-ruby from 1.278.0 to 1.279.0 in /.github…

e7c7db6

…/actions/setup-darwin (#716) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build(deps): bump ruby/setup-ruby from 1.279.0 to 1.281.0 in /.github…

d2db273

…/actions/setup-darwin (#719) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build(deps): bump ruby/setup-ruby from 1.282.0 to 1.283.0 in /.github…

ae53ba3

…/actions/setup-darwin (#722) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build(deps): bump ruby/setup-ruby from 1.283.0 to 1.285.0 in /.github…

7385394

…/actions/setup-darwin (#725) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Fixed the failing test cases

f43cd21

pmathew92 had a problem deploying to internal February 2, 2026 04:43 — with GitHub Actions Failure

Merge branch 'main' into SDK-6070

69688d4

pmathew92 had a problem deploying to internal February 2, 2026 04:49 — with GitHub Actions Failure

sanchitmehta94 requested a review from Copilot February 2, 2026 05:04

Copilot started reviewing on behalf of sanchitmehta94 February 2, 2026 05:04 View session

sanchitmehta94 reviewed Feb 2, 2026

View reviewed changes

Copilot AI reviewed Feb 2, 2026

View reviewed changes

Fixed the error in analyze due to the branch conflict issue

d70d1e1

pmathew92 had a problem deploying to internal February 2, 2026 05:27 — with GitHub Actions Failure

pmathew92 temporarily deployed to internal February 2, 2026 05:27 — with GitHub Actions Inactive

fixing swift failures on UTs

ad06a37

pmathew92 temporarily deployed to internal February 2, 2026 06:03 — with GitHub Actions Inactive

pmathew92 had a problem deploying to internal February 2, 2026 06:03 — with GitHub Actions Failure

pmathew92 temporarily deployed to internal February 2, 2026 06:03 — with GitHub Actions Inactive

pmathew92 had a problem deploying to internal February 2, 2026 06:18 — with GitHub Actions Failure

Updated the workflow file

a9cd6ac

pmathew92 temporarily deployed to internal February 2, 2026 06:28 — with GitHub Actions Inactive

pmathew92 had a problem deploying to internal February 2, 2026 06:28 — with GitHub Actions Failure

pmathew92 temporarily deployed to internal February 2, 2026 06:28 — with GitHub Actions Inactive

Minor change

d80cfa8

pmathew92 had a problem deploying to internal February 2, 2026 07:00 — with GitHub Actions Failure

pmathew92 deployed to internal February 2, 2026 07:00 — with GitHub Actions Active

pmathew92 temporarily deployed to internal February 2, 2026 07:00 — with GitHub Actions Inactive

pmathew92 had a problem deploying to internal February 2, 2026 07:14 — with GitHub Actions Failure

	// in auth0_flutter/example/ios/.symlinks/plugins/auth0_flutter/test/mobile/web_authentication_test.dart.
	// in auth0_flutter/test/mobile/web_authentication_test.dart.

	/// Returns null is no credentials are stored
	/// Returns null if no credentials are stored

	/// Retrieves the credentials from the native storage.
	/// Retrieves the ID token contents (claims) from the native storage.

CredentialsManager user info/ID token contents accessible via flutter SDK #607

Are you sure you want to change the base?

CredentialsManager user info/ID token contents accessible via flutter SDK #607

Conversation

NandanPrabhu commented Jun 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📋 Changes

📎 References

🎯 Testing

Uh oh!

pmathew92 Jun 26, 2025

Choose a reason for hiding this comment

Uh oh!

pmathew92 Jun 26, 2025

Choose a reason for hiding this comment

Uh oh!

Widcket Jun 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Widcket Jun 26, 2025

Choose a reason for hiding this comment

Uh oh!

Widcket left a comment

Choose a reason for hiding this comment

Uh oh!

sanchitmehta94 left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

sanchitmehta94 Feb 2, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

NandanPrabhu commented Jun 26, 2025 •

edited

Loading

Widcket Jun 26, 2025 •

edited

Loading

sanchitmehta94 left a comment •

edited

Loading