feat: add useTrustedWebActivity option for Android Web Auth by subhankarmaiti · Pull Request #1590 · auth0/react-native-auth0

subhankarmaiti · 2026-07-08T20:23:28Z

Adds a useTrustedWebActivity option to authorize and clearSession. On Android, this launches the login/logout flow as a Trusted Web Activity (full-screen, no address bar) instead of a Custom Tab, falling back to a Custom Tab if Digital Asset Links verification fails. No-op on iOS and Web.

Requires registering the app's SHA-256 fingerprint and package name in the Auth0 Dashboard (see EXAMPLES.md).

Usage

await authorize({}, { useTrustedWebActivity: true });

Summary by CodeRabbit

New Features
- Added an optional “Trusted Web Activity” mode for Android during Web Auth login and logout (including the session-clearing flow).
- Example screens now include a toggle to enable/disable Trusted Web Activity.
Documentation
- Added an Android guide covering setup/verification requirements, Android-only behavior, and automatic fallback to Custom Tabs on verification failure.
- Included usage examples for enabling the option during authorize and clearSession.
Tests
- Updated native bridge tests to verify correct forwarding of the new option.

coderabbitai · 2026-07-08T20:23:49Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 343c3d0b-ea02-4635-9eae-b713a2e7ad5b

📥 Commits

Reviewing files that changed from the base of the PR and between d09e22c and f1bd23d.

📒 Files selected for processing (6)

android/src/main/java/com/auth0/react/A0Auth0Module.kt
android/src/main/oldarch/com/auth0/react/A0Auth0Spec.kt
ios/A0Auth0.mm
src/platforms/native/bridge/NativeBridgeManager.ts
src/platforms/native/bridge/__tests__/NativeBridgeManager.spec.ts
src/specs/NativeA0Auth0.ts

🚧 Files skipped from review as they are similar to previous changes (4)

src/specs/NativeA0Auth0.ts
src/platforms/native/bridge/NativeBridgeManager.ts
ios/A0Auth0.mm
android/src/main/java/com/auth0/react/A0Auth0Module.kt

📝 Walkthrough

Walkthrough

This PR adds an optional useTrustedWebActivity setting to native authorization and logout flows, forwarding it through TypeScript and native bridges to Android builders. It also updates iOS method signatures, example controls, bridge tests, and Android setup documentation.

Changes

Trusted Web Activity option for Android web auth

Layer / File(s)	Summary
Option contracts and native specifications `src/types/platform-specific.ts`, `src/specs/NativeA0Auth0.ts`, `android/src/main/oldarch/...`	Adds `useTrustedWebActivity` to native authorization, session-clearing, and bridge method signatures.
Bridge forwarding and validation `src/platforms/native/bridge/NativeBridgeManager.ts`, `src/platforms/native/bridge/__tests__/NativeBridgeManager.spec.ts`	`authorize` and `clearSession` forward the option with a false default; tests cover omitted, enabled, and browser-package arguments.
Platform authentication handling `android/src/main/java/...`, `ios/A0Auth0.mm`	Android login and logout builders conditionally call `withTrustedWebActivity()`; exported iOS methods accept the new parameter.
Example controls and setup documentation `example/src/screens/...`, `EXAMPLES.md`	Example screens add toggles and pass the option to authorization; documentation covers Digital Asset Links setup, fallback behavior, and logout usage.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
  participant ExampleApp
  participant NativeBridgeManager
  participant Auth0NativeModule
  ExampleApp->>NativeBridgeManager: authorize({ useTrustedWebActivity: true })
  NativeBridgeManager->>Auth0NativeModule: webAuth(..., useTrustedWebActivity)
  Auth0NativeModule->>Auth0NativeModule: withTrustedWebActivity() on login builder
  ExampleApp->>NativeBridgeManager: clearSession({ useTrustedWebActivity: true })
  NativeBridgeManager->>Auth0NativeModule: webAuthLogout(..., useTrustedWebActivity)
  Auth0NativeModule->>Auth0NativeModule: withTrustedWebActivity() on logout builder

Suggested reviewers: pmathew92, sanchitmehtagit

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: adding the useTrustedWebActivity option for Android Web Auth.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch feat/trusted-web-activity-android

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint install failed. For unrecoverable errors, disable the tool in CodeRabbit configuration.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

pmathew92 · 2026-07-10T06:12:21Z

        safariViewControllerPresentationStyle: Double?,
        additionalParameters: ReadableMap?,
        allowedBrowserPackages: ReadableArray?,
+        useTrustedWebActivity: Boolean?,


Should this be nullable ? Default as false ?

Yes, and unless its true we are not adding withTrustedWebActivity()

pmathew92 · 2026-07-10T06:14:15Z

+   - The **SHA-256 fingerprint** from step 1.
+
+3. Save. Digital Asset Links verification now succeeds and the login page renders full-screen.
+


Pbly just mention they can validate the same with
{DOMAIN}/.well-known/assetlinks.json

updated the example

…s native modules

feat: add useTrustedWebActivity option for Android Web Auth

7120caf

subhankarmaiti requested a review from a team as a code owner July 8, 2026 20:23

Merge branch 'master' into feat/trusted-web-activity-android

c3fc648

pmathew92 reviewed Jul 10, 2026

View reviewed changes

docs: add confirmation step for TWA registration in examples

d09e22c

pmathew92 previously approved these changes Jul 10, 2026

View reviewed changes

feat: update useTrustedWebActivity parameter to be non-nullable acros…

f1bd23d

…s native modules

subhankarmaiti dismissed pmathew92’s stale review via f1bd23d July 10, 2026 07:21

pmathew92 approved these changes Jul 10, 2026

View reviewed changes

subhankarmaiti merged commit cc36f89 into master Jul 10, 2026
5 checks passed

subhankarmaiti deleted the feat/trusted-web-activity-android branch July 10, 2026 07:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: add useTrustedWebActivity option for Android Web Auth#1590

feat: add useTrustedWebActivity option for Android Web Auth#1590
subhankarmaiti merged 4 commits into
masterfrom
feat/trusted-web-activity-android

subhankarmaiti commented Jul 8, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Jul 8, 2026 •

edited

Loading

Walkthrough

Changes

Sequence Diagram(s)

Uh oh!

pmathew92 Jul 10, 2026

Uh oh!

subhankarmaiti Jul 10, 2026

Uh oh!

pmathew92 Jul 10, 2026

Uh oh!

subhankarmaiti Jul 10, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

		- The SHA-256 fingerprint from step 1.

		3. Save. Digital Asset Links verification now succeeds and the login page renders full-screen.

Uh oh!

Conversation

subhankarmaiti commented Jul 8, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Usage

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Jul 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Sequence Diagram(s)

Uh oh!

pmathew92 Jul 10, 2026

Choose a reason for hiding this comment

Uh oh!

subhankarmaiti Jul 10, 2026

Choose a reason for hiding this comment

Uh oh!

pmathew92 Jul 10, 2026

Choose a reason for hiding this comment

Uh oh!

subhankarmaiti Jul 10, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

subhankarmaiti commented Jul 8, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jul 8, 2026 •

edited

Loading