CredentialsManager user info/ID token contents accessible via flutter SDK

.github/workflows/main.yml

@@ -126,7 +126,7 @@ jobs:
         strategy:
           matrix:
             xcode:
-              - '26.0'
+              - '26.2'
 
         env:
           platform: iOS
@@ -160,7 +160,7 @@ jobs:
               with:
                 name: iOS coverage
                 path: auth0_flutter/example/ios/cobertura
-    # TODO: fix both android and iOS smoke testcases and uncomment them.  
+    # TODO: fix both android and iOS smoke testcases and uncomment them.
     # test-ios-smoke:
     #     name: Run native iOS smoke tests using Xcode ${{ matrix.xcode }}
     #     runs-on: macos-15-large
@@ -174,7 +174,7 @@ jobs:
     #     strategy:
     #       matrix:
     #         xcode:
-    #           - '26.0'
+    #           - '26.2'
 
     #     steps:
     #         - name: Checkout
@@ -204,7 +204,7 @@ jobs:
         strategy:
           matrix:
             xcode:
-              - '26.0'
+              - '26.2'
 
         env:
           platform: macOS
@@ -247,7 +247,7 @@ jobs:
     #     strategy:
     #       matrix:
     #         xcode:
-    #           - '26.0'
+    #           - '26.2'
 
     #     steps:
     #         - name: Checkout

auth0_flutter/EXAMPLES.md

@@ -15,6 +15,7 @@
 - [📱 Credentials Manager](#-credentials-manager)
   - [Check for stored credentials](#check-for-stored-credentials)
   - [Retrieve stored credentials](#retrieve-stored-credentials)
+  - [Retrieve user profile](#retrieve-user-profile)
   - [Custom implementations](#custom-implementations)
   - [Local authentication](#local-authentication)
   - [Credentials Manager configuration](#credentials-manager-configuration)
@@ -395,6 +396,7 @@ await webAuth.logout();
 
 - [Check for stored credentials](#check-for-stored-credentials)
 - [Retrieve stored credentials](#retrieve-stored-credentials)
+- [Retrieve user profile](#retrieve-user-profile)
 - [Custom implementations](#custom-implementations)
 - [Local authentication](#local-authentication)
 - [Credentials Manager configuration](#credentials-manager-configuration)
@@ -429,6 +431,18 @@ final credentials = await auth0.credentialsManager.credentials();
 
 > 💡 You do not need to call `credentialsManager.storeCredentials()` afterward. The Credentials Manager automatically persists the renewed credentials.
 
+### Retrieve user profile
+
+Fetch the user profile associated with the stored credentials. This method returns `null` if no credentials are present in storage.
+
+```dart
+final userProfile = await auth0.credentialsManager.user();
+
+if (userProfile != null) {
+  print('Email: ${userProfile.email}');
+}
+```
+
 ### Custom implementations
 
 flutter_auth0 exposes a built-in, default Credentials Manager implementation through the `credentialsManager` property. You can pass your own implementation to the `Auth0` constructor. If you're using Web Auth, this implementation will be used to store the user's credentials after login and delete them after logout.

auth0_flutter/android/src/main/kotlin/com/auth0/auth0_flutter/Auth0FlutterPlugin.kt

@@ -35,7 +35,8 @@ class Auth0FlutterPlugin: FlutterPlugin, MethodCallHandler, ActivityAware {
     RenewCredentialsRequestHandler(),
     SaveCredentialsRequestHandler(),
     HasValidCredentialsRequestHandler(),
-    ClearCredentialsRequestHandler()
+    ClearCredentialsRequestHandler(),
+    GetCredentialsUserInfoRequestHandler()
   ))
   private val dpopCallHandler = Auth0FlutterDPoPMethodCallHandler(listOf(
     GetDPoPHeadersApiRequestHandler(),

auth0_flutter/android/src/main/kotlin/com/auth0/auth0_flutter/request_handlers/credentials_manager/GetCredentialsUserInfoRequestHandler.kt

@@ -0,0 +1,25 @@
+package com.auth0.auth0_flutter.request_handlers.credentials_manager
+
+import android.content.Context
+import com.auth0.android.authentication.storage.SecureCredentialsManager
+import com.auth0.auth0_flutter.request_handlers.MethodCallRequest
+import com.auth0.auth0_flutter.toMap
+import io.flutter.plugin.common.MethodChannel
+
+
+class GetCredentialsUserInfoRequestHandler: CredentialsManagerRequestHandler {
+    override val method: String = "credentialsManager#user"
+    override fun handle(
+        credentialsManager: SecureCredentialsManager,
+        context: Context,
+        request: MethodCallRequest,
+        result: MethodChannel.Result
+    ) {
+        val userProfile = credentialsManager.userProfile
+        if (userProfile != null) {
+            result.success(userProfile.toMap())
+        } else {
+            result.success(null)
+        }
+    }
+}

auth0_flutter/android/src/test/kotlin/com/auth0/auth0_flutter/CredentialsManagerMethodCallHandlerTest.kt

@@ -5,6 +5,7 @@ import android.content.Context
 import android.content.SharedPreferences
 import com.auth0.auth0_flutter.request_handlers.credentials_manager.ClearCredentialsRequestHandler
 import com.auth0.auth0_flutter.request_handlers.credentials_manager.CredentialsManagerRequestHandler
+import com.auth0.auth0_flutter.request_handlers.credentials_manager.GetCredentialsUserInfoRequestHandler
 import com.auth0.auth0_flutter.request_handlers.credentials_manager.HasValidCredentialsRequestHandler
 import io.flutter.plugin.common.MethodCall
 import io.flutter.plugin.common.MethodChannel.Result
@@ -41,7 +42,16 @@ class CredentialsManagerMethodCallHandlerTest {
         val mockResult = mock<Result>()
 
         handler.activity = if (activity === null)  mock() else activity
-        handler.context = if (context === null)  mock() else context
+
+        val mockContext = if (context === null) {
+            val ctx: Context = mock()
+            val mockPrefs: SharedPreferences = mock()
+            `when`(ctx.getSharedPreferences(any(), any())).thenReturn(mockPrefs)
+            ctx
+        } else {
+            context
+        }
+        handler.context = mockContext
 
         handler.onMethodCall(MethodCall(method, arguments), mockResult)
         onResult(mockResult)
@@ -139,7 +149,7 @@ class CredentialsManagerMethodCallHandlerTest {
 
         val managerCaptor = argumentCaptor<com.auth0.android.authentication.storage.SecureCredentialsManager>()
         verify(clearCredentialsHandler, times(2)).handle(managerCaptor.capture(), any(), any(), any())
-        
+
         MatcherAssert.assertThat(
             "Manager should be reused when configuration is identical",
             managerCaptor.firstValue,
@@ -193,7 +203,7 @@ class CredentialsManagerMethodCallHandlerTest {
 
         val managerCaptor = argumentCaptor<com.auth0.android.authentication.storage.SecureCredentialsManager>()
         verify(clearCredentialsHandler, times(2)).handle(managerCaptor.capture(), any(), any(), any())
-        
+
         MatcherAssert.assertThat(
             "New manager should be created when domain changes",
             managerCaptor.firstValue,
@@ -233,7 +243,7 @@ class CredentialsManagerMethodCallHandlerTest {
         val arguments2 = hashMapOf<String, Any?>(
             "_account" to mapOf(
                 "domain" to "test.auth0.com",
-                "clientId" to "client-2", 
+                "clientId" to "client-2",
             ),
             "_userAgent" to mapOf(
                 "name" to "auth0-flutter",
@@ -245,7 +255,7 @@ class CredentialsManagerMethodCallHandlerTest {
 
         val managerCaptor = argumentCaptor<com.auth0.android.authentication.storage.SecureCredentialsManager>()
         verify(clearCredentialsHandler, times(2)).handle(managerCaptor.capture(), any(), any(), any())
-        
+
         MatcherAssert.assertThat(
             "New manager should be created when clientId changes",
             managerCaptor.firstValue,
@@ -294,15 +304,15 @@ class CredentialsManagerMethodCallHandlerTest {
                 "version" to "1.0.0"
             ),
             "credentialsManagerConfiguration" to mapOf(
-                "android" to mapOf("sharedPreferencesName" to "prefs_2") 
+                "android" to mapOf("sharedPreferencesName" to "prefs_2")
             )
         )
         val call2 = MethodCall("credentialsManager#clearCredentials", arguments2)
         handler.onMethodCall(call2, mockResult)
 
         val managerCaptor = argumentCaptor<com.auth0.android.authentication.storage.SecureCredentialsManager>()
         verify(clearCredentialsHandler, times(2)).handle(managerCaptor.capture(), any(), any(), any())
-        
+
         MatcherAssert.assertThat(
             "New manager should be created when sharedPreferencesName changes",
             managerCaptor.firstValue,
@@ -349,14 +359,14 @@ class CredentialsManagerMethodCallHandlerTest {
                 "name" to "auth0-flutter",
                 "version" to "1.0.0"
             ),
-            "useDPoP" to true 
+            "useDPoP" to true
         )
         val call2 = MethodCall("credentialsManager#clearCredentials", arguments2)
         handler.onMethodCall(call2, mockResult)
 
         val managerCaptor = argumentCaptor<com.auth0.android.authentication.storage.SecureCredentialsManager>()
         verify(clearCredentialsHandler, times(2)).handle(managerCaptor.capture(), any(), any(), any())
-        
+
         MatcherAssert.assertThat(
             "New manager should be created when useDPoP flag changes",
             managerCaptor.firstValue,
@@ -414,7 +424,7 @@ class CredentialsManagerMethodCallHandlerTest {
 
         val managerCaptor = argumentCaptor<com.auth0.android.authentication.storage.SecureCredentialsManager>()
         verify(clearCredentialsHandler, times(2)).handle(managerCaptor.capture(), any(), any(), any())
-        
+
         MatcherAssert.assertThat(
             "New manager should be created when localAuthentication changes",
             managerCaptor.firstValue,
@@ -426,7 +436,7 @@ class CredentialsManagerMethodCallHandlerTest {
     fun `handler should reuse manager across different method calls with same configuration`() {
         val clearCredentialsHandler = mock<ClearCredentialsRequestHandler>()
         val hasValidCredentialsHandler = mock<HasValidCredentialsRequestHandler>()
-        
+
         `when`(clearCredentialsHandler.method).thenReturn("credentialsManager#clearCredentials")
         `when`(hasValidCredentialsHandler.method).thenReturn("credentialsManager#hasValidCredentials")
 
@@ -451,15 +461,58 @@ class CredentialsManagerMethodCallHandlerTest {
 
         val clearManagerCaptor = argumentCaptor<com.auth0.android.authentication.storage.SecureCredentialsManager>()
         val hasValidManagerCaptor = argumentCaptor<com.auth0.android.authentication.storage.SecureCredentialsManager>()
-        
+
         verify(clearCredentialsHandler).handle(clearManagerCaptor.capture(), any(), any(), any())
         verify(hasValidCredentialsHandler).handle(hasValidManagerCaptor.capture(), any(), any(), any())
-        
+
         MatcherAssert.assertThat(
             "Same manager should be reused across different method calls with identical configuration",
             clearManagerCaptor.firstValue,
             CoreMatchers.sameInstance(hasValidManagerCaptor.firstValue)
         )
     }
+
+    @Test
+    fun `handler invokes GetCredentialsUserInfoRequestHandler for credentialsManager#user`() {
+        val getUserInfoHandler = mock<GetCredentialsUserInfoRequestHandler>()
+        `when`(getUserInfoHandler.method).thenReturn("credentialsManager#user")
+
+        runCallHandler(
+            "credentialsManager#user",
+            requestHandlers = listOf(getUserInfoHandler)
+        ) { result ->
+            verify(getUserInfoHandler).handle(any(), any(), any(), any())
+        }
+    }
+
+    @Test
+    fun `handler returns UserProfile result from GetCredentialsUserInfoRequestHandler`() {
+        val getUserInfoHandler = mock<GetCredentialsUserInfoRequestHandler>()
+        `when`(getUserInfoHandler.method).thenReturn("credentialsManager#user")
+
+        val userProfileMap = mapOf(
+            "sub" to "auth0|123456",
+            "name" to "John Doe",
+            "email" to "[email protected]"
+        )
+
+        doAnswer { invocation ->
+            val result = invocation.getArgument<Result>(3)
+            result.success(userProfileMap)
+        }.`when`(getUserInfoHandler).handle(any(), any(), any(), any())
+
+        val mockResult = mock<Result>()
+        val handler = CredentialsManagerMethodCallHandler(listOf(getUserInfoHandler))
+        handler.activity = mock()
+
+        val mockContext: Context = mock()
+        val mockPrefs: SharedPreferences = mock()
+        `when`(mockContext.getSharedPreferences(any(), any())).thenReturn(mockPrefs)
+        handler.context = mockContext
+
+        handler.onMethodCall(MethodCall("credentialsManager#user", defaultArguments), mockResult)
+
+        verify(mockResult).success(userProfileMap)
+    }
 }