added android tests to github action workflow

Author: NandanPrabhu

.github/workflows/main.yml

@@ -31,3 +31,27 @@ jobs:
         uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f
         with:
           directory: coverage
+
+  android-test:
+    name: Run Android tests
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+
+      - name: Setup
+        uses: ./.github/actions/setup
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
+        with:
+          distribution: temurin
+          java-version: '17'
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5
+
+      - name: Run Android unit tests
+        working-directory: example/android
+        run: ./gradlew :react-native-auth0:testDebugUnitTest

README.md

@@ -1079,4 +1079,4 @@ This project is licensed under the MIT license. See the <a href="https://github.
 [license-image]: https://img.shields.io/npm/l/react-native-auth0.svg?style=flat-square
 [license-url]: #license
 [downloads-image]: https://img.shields.io/npm/dm/react-native-auth0.svg?style=flat-square
-[downloads-url]: https://npmjs.org/package/react-native-auth0
+[downloads-url]: https://npmjs.org/package/react-native-auth0

android/src/main/java/com/auth0/react/A0Auth0Module.kt

@@ -82,6 +82,9 @@ class A0Auth0Module(private val reactContext: ReactApplicationContext) : A0Auth0
             options.getMap("defaultHeaders")?.let { headers ->
                 builder.defaultHeaders(headers.toHashMap().mapValues { it.value?.toString() ?: "" })
             }
+            // Only honor enableLogging on debug builds: Auth0.Android logs full request/response
+            // bodies at this level, including plaintext access/refresh/ID tokens from token-endpoint
+            // responses. Test coverage in A0Auth0ModuleNetworkingOptionsTest ensures this gate holds.
             if (isDebuggable && options.hasKey("enableLogging")) {
                 builder.enableLogging(options.getBoolean("enableLogging"))
             }

android/src/test/java/com/auth0/react/A0Auth0ModuleNetworkingOptionsTest.kt

@@ -80,10 +80,10 @@ class A0Auth0ModuleNetworkingOptionsTest {
     fun `enableLogging is ignored on a non-debuggable build even when requested`() {
         server.enqueue(MockResponse().setBody("{}"))
 
-        // If the debuggable gate is ever removed, Auth0.Android attaches its logging
-        // interceptor and this request crashes ("Method ... not mocked") because
-        // android.util.Log isn't stubbed in this unit test environment - that crash is
-        // exactly the regression this test is meant to catch.
+        // SECURITY: If the isDebuggable gate is ever removed, Auth0.Android attaches its
+        // logging interceptor which logs full request/response bodies (including tokens).
+        // This test would crash ("Method android.util.Log not mocked") if that happens,
+        // catching the security regression before it ships.
         val client = A0Auth0Module.buildNetworkingClient(
             JavaOnlyMap.of("enableLogging", true),
             isDebuggable = false

src/types/common.ts

@@ -228,6 +228,15 @@ export interface Auth0Options {
  * Mirrors `DefaultClient.Builder` from the Auth0.Android SDK.
  *
  * @remarks Android only. Has no effect on iOS or web.
+ *
+ * @example
+ * ```ts
+ * networkingOptions: {
+ *   connectTimeout: 30,
+ *   readTimeout: 30,
+ *   defaultHeaders: { 'X-App-Version': '1.2.3' }
+ * }
+ * ```
  */
 export interface NetworkingOptions {
   /** Connection timeout, in seconds. @default 10 */