fix: Fixing the memory leak introduced in the DPoP flow

[pmathew92]

Changes

This Pr fixes the memory leak introduced as part of the DPoP flow. The dpop property in the WebAuthProvider class will retain the instance of the activity/fragment context preventing it from being garbage collected. Updated the context in the DPoP class to use an activityContext instead.

Testing

Please describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. Since this library has unit testing, tests should be added for new functionality and existing tests should complete without errors.

• This change adds unit test coverage

• This change adds integration test coverage

• This change has been tested on the latest version of the platform/language or why not

Checklist

• I have read the Auth0 general contribution guidelines

• I have read the Auth0 Code of Conduct

• All existing and new tests complete without errors

[Copilot]

Pull request overview

This PR fixes a memory leak in the DPoP flow by preventing the DPoP class from retaining references to Activity or Fragment contexts. The fix ensures that only the application context is stored internally, allowing Activity/Fragment contexts to be properly garbage collected.

• Changed the DPoP class to store applicationContext instead of the passed context
• Updated the constructor parameter to not store the context directly
• Added test mocking for applicationContext to ensure tests work with the new implementation

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
auth0/src/main/java/com/auth0/android/dpop/DPoP.kt	Modified constructor to extract and store applicationContext instead of storing the passed context directly, preventing memory leaks from Activity/Fragment references
auth0/src/test/java/com/auth0/android/dpop/DPoPTest.kt	Added mock setup for applicationContext to support the updated DPoP implementation
auth0/src/test/java/com/auth0/android/provider/WebAuthProviderTest.kt	Added mock setup for applicationContext to support the updated DPoP implementation
auth0/src/test/java/com/auth0/android/authentication/AuthenticationAPIClientTest.kt	Added mock setup for applicationContext to support the updated DPoP implementation

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sanchitmehta94]

For my understanding . holding activity context would cause issue DPoP instance lives longer than activity and causing activity to not GC?

[pmathew92]

Yes