Github issue: #890 Conforming Credential Manager to Sendable

Author: sanchitmehtagit

Auth0/Authentication.swift

@@ -13,7 +13,7 @@ public typealias DatabaseUser = (email: String, username: String?, verified: Boo
 
  - ``AuthenticationError``
  */
-public protocol Authentication: SenderConstraining, Trackable, Loggable {
+public protocol Authentication: SenderConstraining, Trackable, Loggable, Sendable {
 
     /// The Auth0 Client ID.
     var clientId: String { get }

Auth0/BioAuthentication.swift

@@ -1,8 +1,8 @@
 #if WEB_AUTH_PLATFORM
 import Foundation
-import LocalAuthentication
+@preconcurrency import LocalAuthentication
 
-struct BioAuthentication {
+struct BioAuthentication: Sendable {
 
     private let authContext: LAContext
     private let evaluationPolicy: LAPolicy

Auth0/BiometricPolicy.swift

@@ -2,7 +2,7 @@
 import Foundation
 
 /// Defines the policy for when a biometric prompt should be shown when using the Credentials Manager.
-public enum BiometricPolicy {
+public enum BiometricPolicy: Sendable {
 
     /// Default behavior. Uses the same LAContext instance, allowing the system to manage biometric prompts.
     /// The system may skip the prompt if biometric authentication was recently successful.

Auth0/CredentialsManager.swift

@@ -24,7 +24,7 @@ import LocalAuthentication
 ///
 /// - ``CredentialsManagerError``
 /// - <doc:RefreshTokens>
-public struct CredentialsManager {
+public struct CredentialsManager: Sendable {
 
     private let storage: CredentialsStorage
     private let storeKey: String
@@ -33,7 +33,8 @@ public struct CredentialsManager {
     #if WEB_AUTH_PLATFORM
     var bioAuth: BioAuthentication?
     // Biometric session management - using a class to allow mutation in non-mutating methods
-    private final class BiometricSession {
+    // @unchecked Sendable is fine here as we are using lock to read and update lastBiometricAuthTime which is safe acorss threads.
+    private final class BiometricSession: @unchecked Sendable {
         let noSession: TimeInterval = -1
         var lastBiometricAuthTime: TimeInterval = -1
         let lock = NSLock()

Auth0/CredentialsStorage.swift

@@ -2,7 +2,7 @@ import SimpleKeychain
 import Foundation
 
 /// Generic storage API for storing credentials.
-public protocol CredentialsStorage {
+public protocol CredentialsStorage: Sendable {
 
     /// Retrieves a storage entry.
     ///

Auth0/IDTokenValidator.swift

@@ -1,6 +1,6 @@
 #if WEB_AUTH_PLATFORM
 import Foundation
-import JWTDecode
+@preconcurrency import JWTDecode
 
 protocol JWTValidator {
     func validate(_ jwt: JWT) -> Auth0Error?

Auth0/Requestable.swift

@@ -1,5 +1,4 @@
 import Foundation
-import Combine
 
 public protocol Requestable {
     associatedtype ResultType

Auth0/Telemetry.swift

@@ -1,7 +1,7 @@
 import Foundation
 
 /// Generates and sets the `Auth0-Client` header.
-public struct Telemetry {
+public struct Telemetry: Sendable {
 
     static let NameKey = "name"
     static let VersionKey = "version"