Android java toolkit for Auth0 API
Android API version 15 or newer
###Gradle
Auth0.android is available through Gradle. To install it, simply add the following line to your build.gradle file:
dependencies {
compile "com.auth0.android:auth0:1.0.0-beta.3"
}Open your app's AndroidManifest.xml file and add the following permission.
<uses-permission android:name="android.permission.INTERNET" />First create an instance of Auth0 with your client information
Auth0 account = new Auth0("{YOUR_CLIENT_ID}", "{YOUR_DOMAIN}");The client provides methods to authenticate the user against Auth0 server.
Create a new instance by passing the account:
AuthenticationAPIClient authentication = new AuthenticationAPIClient(account);authentication
.login("[email protected]", "a secret password", "my-database-connection")
.start(new BaseCallback<Credentials>() {
@Override
public void onSuccess(Credentials payload) {
//Logged in!
}
@Override
public void onFailure(AuthenticationException error) {
//Error!
}
});The default scope used is
openid
Step 1: Request the code
authentication
.passwordlessWithEmail("[email protected]", PasswordlessType.CODE, "my-passwordless-connection")
.start(new BaseCallback<Credentials>() {
@Override
public void onSuccess(Void payload) {
//Code sent!
}
@Override
public void onFailure(AuthenticationException error) {
//Error!
}
});The default scope used is
openid
Step 2: Input the code
authentication
.loginWithEmail("[email protected]", "a secret password", "my-passwordless-connection")
.start(new BaseCallback<Credentials>() {
@Override
public void onSuccess(Credentials payload) {
//Logged in!
}
@Override
public void onFailure(AuthenticationException error) {
//Error!
}
});authentication
.signUp("[email protected]", "a secret password", "my-database-connection")
.start(new BaseCallback<Credentials>() {
@Override
public void onSuccess(Credentials payload) {
//Signed Up & Logged in!
}
@Override
public void onFailure(AuthenticationException error) {
//Error!
}
});authentication
.tokenInfo("user token")
.start(new BaseCallback<Credentials>() {
@Override
public void onSuccess(UserProfile payload) {
//Got the profile!
}
@Override
public void onFailure(AuthenticationException error) {
//Error!
}
});The client provides methods to link and unlink users account.
Create a new instance by passing the account:
Auth0 account = new Auth0("client id", "domain");
UsersAPIClient apiClient = new UsersAPIClient(account, "user token");apiClient
.link("primary user id", "secondary user token")
.start(new BaseCallback<List<UserIdentity>>() {
@Override
public void onSuccess(List<UserIdentity> payload) {
//Got the updated identities! Accounts linked.
}
@Override
public void onFailure(Auth0Exception error) {
//Error!
}
});apiClient
.unlink("primary user id", "secondary user id", "secondary provider")
.start(new BaseCallback<List<UserIdentity>>() {
@Override
public void onSuccess(List<UserIdentity> payload) {
//Got the updated identities! Accounts linked.
}
@Override
public void onFailure(Auth0Exception error) {
//Error!
}
});Map<String, Object> metadata = new HashMap<>();
metadata.put("name", Arrays.asList("My", "Name", "Is"));
metadata.put("phoneNumber", "1234567890");
apiClient
.updateMetadata("user id", metadata)
.start(new BaseCallback<UserProfile, ManagementException>() {
@Override
public void onSuccess(UserProfile payload) {
//Metadata updated
}
@Override
public void onFailure(ManagementException error) {
//Error!
}
});First go to Auth0 Dashboard and go to your application's settings. Make sure you have in Allowed Callback URLs a URL with the following format:
https://{YOUR_AUTH0_DOMAIN}/android/{YOUR_APP_PACKAGE_NAME}/callback
Open your app's AndroidManifest.xml file and add the following permissions.
<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />The
ACCESS_NETWORK_STATEpermission it's not mandatory, but used by the WebAuthActivity to check for internet availability before executing a request.
Also register the WebAuthActivity inside the application tag like
<application android:theme="@style/AppTheme">
<!-- ... -->
<activity
android:name="com.auth0.android.provider.WebAuthActivity"
android:theme="@style/MyAppTheme"/>
<!-- ... -->
</application>Finally, define a constant like WEB_REQ_CODE that holds the request code (an int), that will be sent back with the intent once the authentication is finished in the webview.
Open your app's AndroidManifest.xml file and add the following permission.
<uses-permission android:name="android.permission.INTERNET" />Also register the intent filters inside your activity's tag, so you can receive the call in your activity. Note that you will have to specify the callback url inside the data tag.
<application android:theme="@style/AppTheme">
<!-- ... -->
<activity
android:name="com.mycompany.MainActivity"
android:theme="@style/MyAppTheme">
<intent-filter>
<action android:name="android.intent.action.VIEW" />
<category android:name="android.intent.category.DEFAULT" />
<category android:name="android.intent.category.BROWSABLE" />
<data
android:host="{YOUR_AUTH0_DOMAIN}"
android:pathPrefix="/android/{YOUR_APP_PACKAGE_NAME}/callback"
android:scheme="https" />
</intent-filter>
</activity>
<!-- ... -->
</application>In your Activity class define a constant like WEB_REQ_CODE that holds the request code (an int), that will be sent back with the intent once the auth is finished in the browser/webview. To capture the response, override the OnActivityResult and the onNewIntent methods and call WebAuthProvider.resume() with the received parameters:
public class MyActivity extends Activity {
private static final int WEB_REQ_CODE = 110;
@Override
protected void onActivityResult(int requestCode, int resultCode, Intent data) {
switch (requestCode) {
case WEB_REQ_CODE:
lockView.showProgress(false);
WebAuthProvider.resume(requestCode, resultCode, data);
break;
default:
super.onActivityResult(requestCode, resultCode, data);
}
}
@Override
protected void onNewIntent(Intent intent) {
if (WebAuthProvider.resume(intent)) {
return;
}
super.onNewIntent(intent);
}
}WebAuthProvider.init(account)
.withConnection("twitter")
.start(MainActivity.this, authCallback, WEB_REQ_CODE);The default connection used is
Username-Password-Authentication
Before you can use
Code Grantin Android, make sure to go to your client's section in dashboard and check in the Settings thatClient TypeisNative.
WebAuthProvider.init(account)
.useCodeGrant(true)
.start(MainActivity.this, authCallback, WEB_REQ_CODE);WebAuthProvider.init(account)
.useBrowser(true)
.start(MainActivity.this, authCallback, WEB_REQ_CODE);Make sure to check the callback url and manifest configuration explained above.
WebAuthProvider.init(account)
.withScope("user openid")
.start(MainActivity.this, authCallback, WEB_REQ_CODE);The default scope used is
openid
WebAuthProvider.init(account)
.useBrowser(true)
.start(MainActivity.this, authCallback, WEB_REQ_CODE);- Why is the Android Lint error
'InvalidPackage'considered a warning?
When building the project with build, an error appeared regarding an invalid package on the okio dependency. This snippet is in the build.gradle file so that the build runs fine:
android {
//...
lintOptions {
warning 'InvalidPackage'
}
}##Proguard In the proguard directory you can find the Proguard configuration By default you should at least use the following files:
proguard-okio.proproguard-gson.pro
Auth0 helps you to:
- Add authentication with multiple authentication sources, either social like Google, Facebook, Microsoft Account, LinkedIn, GitHub, Twitter, Box, Salesforce, amont others, or enterprise identity systems like Windows Azure AD, Google Apps, Active Directory, ADFS or any SAML Identity Provider.
- Add authentication through more traditional username/password databases.
- Add support for linking different user accounts with the same user.
- Support for generating signed Json Web Tokens to call your APIs and flow the user identity securely.
- Analytics of how, when and where users are logging in.
- Pull data from other sources and add it to the user profile, through JavaScript rules.
- Go to Auth0 and click Sign Up.
- Use Google, GitHub or Microsoft Account to login.
If you have found a bug or if you have a feature request, please report them at this repository issues section. Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.
This project is licensed under the MIT license. See the LICENSE file for more info.