Add Login to Your Kotlin Multiplatform Application using the Auth0 Kotlin Multiplatform SDK

kotlin {
    sourceSets {
        commonMain.dependencies {
            // Umbrella module — aggregates web auth, authentication, and credentials
            implementation("com.auth0.kmp:auth0:1.0.0-beta.0")
        }
    }
}

android {
    defaultConfig {
        
        manifestPlaceholders["auth0Scheme"] = "{yourScheme}" // default: your application ID
        manifestPlaceholders["auth0Domain"] = "{yourDomain}"
    }
}

<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android">
    <uses-permission android:name="android.permission.INTERNET" />
</manifest>

<key>CFBundleURLTypes</key>
<array>
    <dict>
        <key>CFBundleTypeRole</key>
        <string>Editor</string>
        <key>CFBundleURLSchemes</key>
        <array>
            <!-- Must match your bundle identifier -->
            <string>com.example.app</string>
        </array>
    </dict>
</array>

import com.auth0.kmp.Auth0
import com.auth0.kmp.core.Auth0Account

// Shared code — one account works for Android and iOS
val account = Auth0Account(
    clientId = "YOUR_AUTH0_CLIENT_ID", // From Application Settings → Client ID
    domain = "{yourDomain}",           // From Application Settings → Domain
)

val auth0 = Auth0(account)

import androidx.lifecycle.ViewModel
import androidx.lifecycle.viewModelScope
import com.auth0.kmp.core.result.Result
import kotlinx.coroutines.flow.MutableStateFlow
import kotlinx.coroutines.flow.StateFlow
import kotlinx.coroutines.flow.asStateFlow
import kotlinx.coroutines.launch

sealed interface AuthState {
    data object LoggedOut : AuthState
    data object Loading : AuthState
    data class LoggedIn(val accessToken: String) : AuthState
    data class Error(val message: String) : AuthState
}

class AuthViewModel(val auth0: Auth0) : ViewModel() {
    
    // Persists and auto-renews tokens (Keystore/DataStore on Android, Keychain on iOS)
    private val credentialsManager = auth0.credentials()

    private val _state = MutableStateFlow<AuthState>(AuthState.LoggedOut)
    val state: StateFlow<AuthState> = _state.asStateFlow()

    fun login() {
        viewModelScope.launch {
            _state.value = AuthState.Loading
            // Opens Universal Login in the system browser
            when (val result = auth0.webAuth.login()) {
                is Result.Success -> {
                    credentialsManager.saveCredentials(result.data)
                    _state.value = AuthState.LoggedIn(result.data.accessToken)
                }
                is Result.Failure -> {
                    _state.value = AuthState.Error(result.error.toString())
                }
            }
        }
    }

    fun logout() {
        viewModelScope.launch {
            // Clears the browser session, then the locally stored credentials
            when (val result = auth0.webAuth.logout()) {
                is Result.Success -> {
                    credentialsManager.clearCredentials()
                    _state.value = AuthState.LoggedOut
                }
                is Result.Failure -> {
                    _state.value = AuthState.Error(result.error.toString())
                }
            }
        }
    }
}

import androidx.compose.material3.Button
import androidx.compose.material3.CircularProgressIndicator
import androidx.compose.material3.MaterialTheme
import androidx.compose.material3.Text
import androidx.compose.runtime.Composable
import androidx.compose.runtime.getValue
import androidx.lifecycle.compose.collectAsStateWithLifecycle
import androidx.lifecycle.viewmodel.compose.viewModel

@Composable
fun App(viewModel: AuthViewModel = viewModel { AuthViewModel() }) {
    MaterialTheme {
        val state by viewModel.state.collectAsStateWithLifecycle()
        when (val current = state) {
            is AuthState.Loading -> CircularProgressIndicator()
            is AuthState.LoggedIn -> Button(onClick = viewModel::logout) { Text("Log Out") }
            is AuthState.Error -> Text("Something went wrong: ${current.message}")
            AuthState.LoggedOut -> Button(onClick = viewModel::login) { Text("Log In") }
        }
    }
}

import com.auth0.kmp.authentication.UserInfo

suspend fun fetchProfile(accessToken: String): UserInfo? {
    return when (val result = auth0.authentication.userInfo(accessToken)) {
        is Result.Success -> result.data // .name, .email, .picture, .customClaims, ...
        is Result.Failure -> null
    }
}