auth0 / auth0-flutter

Auth0 SDK for Flutter
https://pub.dev/documentation/auth0_flutter/latest/
Apache License 2.0
59 stars 39 forks source link

The binary version of its metadata is 1.9.0, expected version is 1.x.x #310

Closed emirua closed 10 months ago

emirua commented 11 months ago

Checklist

Description

This is a shared problem with the auth0 android repo and the last update https://github.com/auth0/Auth0.Android/releases/tag/2.10.2

Flutter is actually not currently supporting kotlin v1.9.0 so this is creating an issue which is not evident at first since we are not updating any dependency in pub but the way this library is managing the dependency using implementation 'com.auth0.android:auth0:2a.+' is updating to the latest version in Android and making this problem hard to identify.

Please stop using the '+' to manage the android dependency.

Reproduction

  1. implement library latest version.
  2. try running the project.
  3. the project will fail.

Additional context

'com.auth0.android:auth0:2.10.1' works well, but 2.10.2 breaks the project.

If I manually change this in the library gradle, the project runs, but this fix is not possible in CI/CD workflows, so I think this fix is really important

auth0_flutter version

1.2.1

Flutter version

3.13.6

Platform

Android

Platform version(s)

2.10.2

poovamraj commented 11 months ago

@emirua I agree that using + is not great for the SDK. This has been raised internally.

But the new release was to handle CVE-2023-3635 in okio. This means it is better to use the latest version. Flutter prompts to fix the issues and you can see the reference here on how to fix the issue you are facing.


┌─ Flutter Fix ────────────────────────────────────────────────────────────────┐
│ [!] Your project requires a newer version of the Kotlin Gradle plugin.       │
│ Find the latest version on                                                   │
│ https://kotlinlang.org/docs/releases.html#release-details, then update       │
│ /Users/poovamrajthanganadarthiagarajan/repositories/auth0-flutter/auth0_flut │
│ ter/example/android/build.gradle:                                            │
│ ext.kotlin_version = '<latest-version>'                                      │
└──────────────────────────────────────────────────────────────────────────────┘
 Kotlin: Unsupported version of com.android.tools.build:gradle plugin: version 4.2.2 or higher should be used with kotlin-android plugin

Or you can see the change in this commit and it should fix the build issues you would face.

Widcket commented 10 months ago

The fix is now out in v1.3.0.