Add support for Multi-Resource Refresh Token (MRRT)

[pmathew92]

Changes

This PR moves the Credentials Manager from a single credentials model to a multiple credentials one, supporting:

1 set of app credentials (the existing functionality)
N sets of API-specific credentials
To this end, two new public methods were added to the Credentials Manager:

// And its coroutine counter part
public fun getApiCredentials(
        audience: String,
        scope: String? = null,
        minTtl: Int = 0,
        parameters: Map<String, String> = emptyMap(),
        headers: Map<String, String> = emptyMap(),
        callback: Callback<APICredentials, CredentialsManagerException>
    )

public fun clearApiCredentials(audience: String)

Testing

Please describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. Since this library has unit testing, tests should be added for new functionality and existing tests should complete without errors.

• This change adds unit test coverage

• This change adds integration test coverage

• This change has been tested on the latest version of the platform/language or why not

Checklist

• I have read the Auth0 general contribution guidelines

• I have read the Auth0 Code of Conduct

• All existing and new tests complete without errors

To fix the issue, one of the operands in the multiplication should be explicitly cast to long before the multiplication occurs. This ensures that the multiplication is performed using long arithmetic, avoiding the risk of integer overflow. Specifically, minTtl should be cast to long before multiplying it by 1000.

The change should be made on line 611, where the multiplication occurs. The updated code will cast minTtl to long before performing the multiplication.

---

To fix the issue, we need to ensure that the multiplication minTtl * 1000 is performed in a long context to prevent integer overflow. This can be achieved by explicitly casting one of the operands (minTtl or 1000) to long before the multiplication. This ensures that the multiplication is performed as a long operation, avoiding overflow.

The specific change will be made on line 944, where minTtl * 1000 is used. We will cast minTtl to long before multiplying it by 1000.

---