Investigate Auth0 for Android

[kaeawc]

The backend and devops contributors have been exploring Auth0 for our overall authentication solution - which saves them and us a lot of work regarding login, forgotten password, email verification, SSO, etc. We should investigate the Android side of this and follow up with CJ Russell who has been leading that so far.

[imonthercks]

@kaeawc , there is a PR ready to go in on the back-end api that deals with securing the appropriate endpoints. It appears the app is written in Kotlin, so here is a link to some details on how you can use the Auth0 SDK to integrated the browser redirect method for authenticating in a Kotlin based Android app. Authenticating Android Apps Developed with Kotlin

Let me know if you need any additional details.

For anyone wanting to test through Postman, here are the values needed if you use Get New Access Token under OAuth2.0 Authorization Type...

Callback URL: org.covital.o2monitor:/oauth2redirect/covital_pulse_oximetry_client_dev
Auth URL: https://o2-monitoring-dev-us.auth0.com/authorize?audience=https://pulseox-sandbox.herokuapp.com/
Access Token URL: https://o2-monitoring-dev.auth0.com/oauth/token
Client ID: 5SvFE06CGaHu39AmPQmTa76X1TlibVUt
Client Secret: Not needed in this case
Scope: openid profile email
Client Authentication: Send client credentials in body

If you need the well known Dev Auth0 config, use the following URL:
https://o2-monitoring-dev-us.auth0.com/.well-known/openid-configuration