Remove propietary dependency

[maksimowiczm]

Checklist

• I have looked into the Readme, Examples, and FAQ and have not found a suitable solution or answer.
• I have looked into the API documentation and have not found a suitable solution or answer.
• I have searched the issues and have not found a suitable solution or answer.
• I have searched the Auth0 Community forums and have not found a suitable solution or answer.
• I agree to the terms within the Auth0 Code of Conduct.

Describe the problem you'd like to have solved

Currently, the Auth0 Android library depends on proprietary component

Auth0.Android/auth0/build.gradle

Line 117 in fde302b

implementation "androidx.credentials:credentials-play-services-auth:$credentialManagerVersion"

This dependency pulls in Google Play Services proprietary blobs, which prevents the use of the library in applications that must remain fully open-source and free of proprietary components.

I understand that it may be required for certain sign-in methods. However, I don’t believe it is necessary for simple email–password authentication.

Describe the ideal solution

From my point of view, the simplest solution would be to publish a separate open-source artifact that does not depend on Google Play Services.

Alternatives and current workarounds

I was able to compile the library without this dependency, and it worked fine with simple email–password authentication, but this is not a viable long-term solution.

Additional context

https://android.googlesource.com/platform/frameworks/support/+/refs/heads/androidx-main/credentials/credentials-play-services-auth/build.gradle

[pmathew92]

Hi @maksimowiczm ,
Thanks for raising this concern. We understand having the play-services dependency might not work with fully open-source application. The dependency is required to support passkeys authentication in the SDK. We will still explore what would be the ideal way to tackle this problem
Thanks

[maksimowiczm]

That’s great to hear. I really like the Auth0 ecosystem and would love to use it in my app. Unfortunately, I can’t use it yet.

It would be super helpful if a decision could be made soon 🙏

[pmathew92]

Hi @maksimowiczm , meanwhile I would suggest you to try version 3.0.0 of the SDK. This release doesn't support passkeys and hence don't have the play services dependency.

[pmathew92]

Moving this to discussion to understand feedback from more community members