MOEN-45933: Add Flutter Android bridge for jwt

[kkgowtham-engg-sdk]

Summary

• Adds JWT Authentication support to the Android core plugin (packages/moengage_flutter/moengage_flutter_android/android/)
• authenticationDetails method routes Dart→Native calls to PluginHelper.passAuthenticationDetails
• Plugin emits AuthenticationErrorEvent back to Flutter as onAuthenticationError via MethodChannel
• Android BOM: 4.0.0, plugin-base BOM: 4.0.0-SNAPSHOT

Related PRs

• android-plugin-base: https://github.com/moengage/android-plugin-base/pull/104

Contract

Branch: master in mobile-sdk-contracts

Methods

Method	Type
authenticationDetails	fire-and-forget
onAuthenticationError (native→hybrid event)	event

🤖 Generated with Claude Code

[moe-hodor]

🚪 Hodor is reviewing this PR... 👀

[moe-hodor]

🔴 Critical — SNAPSHOT dependency: Maven snapshots are unstable, non-reproducible builds. The repository URL points to central.sonatype.com/repository/maven-snapshots/ which only serves SNAPSHOT artifacts. Before merging:

1. Ensure android-plugin-base PR fix(webSDK-Flutter): SUP-18778 updated moengage object #104 is released as a stable version (e.g., 4.0.0 not 4.0.0-SNAPSHOT)
2. Remove this snapshot repository reference
3. Update moengagePluginBaseBomVersion to the stable release

SNAPSHOT dependencies are not allowed in production releases — they can change without notice and break builds.

[moe-hodor]

🔴 Critical — Major version jump: Upgrading plugin-base-bom from 3.0.1 to 4.0.0-SNAPSHOT is a major version bump that likely contains breaking changes. The CHANGELOG mentions "JWT Authentication Support" but doesn't document:

• What breaking API changes were introduced in plugin-base 4.0.0
• Migration steps for existing integrations
• Minimum native SDK version requirements

Before merging, verify that all existing APIs are backward compatible and document any breaking changes.

[moe-hodor]

🔴 Critical — Missing method handler case: METHOD_NAME_AUTHENTICATION_DETAILS is declared in Constants.kt but this line is NOT in the when block shown in the diff. Looking at the switch statement in the file (lines 100-137 visible in context), the case is listed at line 137, BUT I need to verify it's actually calling the method.

Verify that line 137 reads:

METHOD_NAME_AUTHENTICATION_DETAILS -> authenticationDetails(call)

If this mapping is missing, the bridge will silently ignore all JWT authentication calls from Dart.

[moe-hodor]

💡 Suggestion — Add payload validation: The method accepts any non-null string as authentication payload. Consider adding validation:

private fun authenticationDetails(methodCall: MethodCall) {
    try {
        if (methodCall.arguments == null) {
            Logger.print(LogLevel.ERROR) { "$tag authenticationDetails() : Arguments are null" }
            return
        }
        val payload = methodCall.arguments.toString()
        if (payload.isEmpty() || payload == "null") {
            Logger.print(LogLevel.ERROR) { "$tag authenticationDetails() : Invalid payload: $payload" }
            return
        }
        Logger.print { "$tag authenticationDetails() : Arguments: $payload" }
        pluginHelper.passAuthenticationDetails(context, payload)
    } catch (t: Throwable) {
        Logger.print(LogLevel.ERROR, t) { "$tag authenticationDetails() : " }
    }
}

This prevents passing empty or malformed payloads to the native SDK.

[moe-hodor]

⚠️ Warning — Incomplete event handling: The when block handles AuthenticationErrorEvent but the companion object's eventMap initialization (line 169-184 visible in full file read) does NOT include a mapping for EventType.AUTHENTICATION_ERROR.

Current state (line 184 in the diff):

eventMap[EventType.AUTHENTICATION_ERROR] = "onAuthenticationError"

This IS added in the diff at line 184. But verify that EventType.AUTHENTICATION_ERROR exists in the plugin-base enum. If the enum constant doesn't exist in plugin-base-bom:4.0.0-SNAPSHOT, this will fail to compile.

Also verify the diff wasn't truncated — I need to confirm line 184 is actually inside the init {} block of the companion object.

[moe-hodor]

💡 Suggestion — Add complete changelog entry: The entry is missing:

1. Release date: Line 3 says "# Release Date" but it's a placeholder. Should be actual date (e.g., # 25-01-2026).
2. Version number: Line 5 says "## Release Version" but should specify version (e.g., ## 5.0.0).
3. Breaking changes: Major version bumps often have breaking changes. Add a section:

   ### Breaking Changes
   - Requires `android-bom` version `4.0.0` or higher
   - Requires `plugin-base-bom` version `4.0.0` or higher

4. iOS status: Mention that JWT is Android-only in this release:

   ### Platform Support
   - JWT Authentication is currently **Android-only**. iOS support coming in a future release.

[moe-hodor]

Review Summary

Issues (6 after filtering):
🔴 Critical: 3
⚠️ Warning: 1
💡 Suggestion: 2

Hodor filtered 1 low-signal comment(s) to reduce noise.
Verdict: REQUEST_CHANGES