https as a secure way to link directly to content within your app. Custom URL schemes can be subject to client impersonation attacks. You can read more about setting this value in the Auth0.Android SDK readme.
:::
To add the manifest placeholders, add the next line:
diff --git a/articles/quickstart/native/android/interactive.md b/articles/quickstart/native/android/interactive.md
index 7e20f59ce0..c87e1f0135 100644
--- a/articles/quickstart/native/android/interactive.md
+++ b/articles/quickstart/native/android/interactive.md
@@ -24,7 +24,7 @@ locale: en-US
## Install the Auth0 Android SDK {{{ data-action="code" data-code="build.gradle#18:18" }}}
-Add the Auth0 Android SDK into your project. The library will make requests to the Auth0's Authentication and Management APIs.
In your app's build.gradle dependencies section, add the following:
implementation 'com.auth0.android:auth0:2. '
+Add the Auth0 Android SDK into your project. The library will make requests to the Auth0's Authentication and Management APIs.
In your app's build.gradle dependencies section, add the following:
implementation 'com.auth0.android:auth0:2.+'
@@ -33,7 +33,7 @@ locale: en-US
## Add manifest placeholders {{{ data-action="code" data-code="build.gradle#10:12" }}}
-The SDK requires manifest placeholders. Auth0 uses placeholders internally to define an intent-filter, which captures the authentication callback URL. You must set Auth0 tenant domain and the callback URL scheme.
You do not need to declare a specific intent-filter for your activity, because you have defined the manifest placeholders with your Auth0 Domain and Scheme values and the library will handle the redirection for you.
We've used a value of demo for auth0Scheme here, so that a custom URL scheme can be used for the URL that Auth0 redirects to after login. The alternative is https if you want to use Android App Links. You can read more about setting this value in the Auth0.Android SDK README.
+The SDK requires manifest placeholders. Auth0 uses placeholders internally to define an intent-filter, which captures the authentication callback URL. You must set Auth0 tenant domain and the callback URL scheme.
You do not need to declare a specific intent-filter for your activity, because you have defined the manifest placeholders with your Auth0 Domain and Scheme values and the library will handle the redirection for you.
We've used a value of demo for auth0Scheme here, so that a custom URL scheme can be used for the URL that Auth0 redirects to after login. Whenever possible, Auth0 recommends using Android App Links with https as a secure way to link directly to content within your app. Custom URL schemes can be subject to client impersonation attacks. You can read more about setting this value in the Auth0.Android SDK readme.
## Configure your application {{{ data-action="code" data-code="strings.xml#2:3" }}}
diff --git a/articles/quickstart/native/flutter/01-login.md b/articles/quickstart/native/flutter/01-login.md
index b50d75a09b..ab8b38946f 100644
--- a/articles/quickstart/native/flutter/01-login.md
+++ b/articles/quickstart/native/flutter/01-login.md
@@ -46,7 +46,7 @@ If the callback and logout URLs are not set, users will be unable to log in and
Go to the settings page of your Auth0 application and add the following URLs to **Allowed Callback URLs** and **Allowed Logout URLs**, depending on the platform of your app. If you have a custom domain, use this instead of the Auth0 domain from the settings page.
::: note
-On Android, the value of the `SCHEME` placeholder can be `https` or some other custom scheme. `https` schemes require enabling Android App Links.
+On Android, the value of the `SCHEME` placeholder can be `https` or some other custom scheme. Whenever possible, Auth0 recommends using Android App Links with `https` as a secure way to link directly to content within your app. Custom URL schemes can be subject to client impersonation attacks.
On iOS 17.4+ and macOS 14.4+ it is possible to use Universal Links (`https` scheme) as callback and logout URLs. When enabled, the SDK will fall back to using a custom URL scheme on older iOS / macOS versions –your app's bundle identifier.
diff --git a/articles/quickstart/native/flutter/_configure_urls_interactive.md b/articles/quickstart/native/flutter/_configure_urls_interactive.md
index 2368135b60..cbdfaf2342 100644
--- a/articles/quickstart/native/flutter/_configure_urls_interactive.md
+++ b/articles/quickstart/native/flutter/_configure_urls_interactive.md
@@ -17,7 +17,7 @@ The callback and logout URLs are the URLs that Auth0 invokes to redirect back to
Set the callback and logout URLs to the following values, depending on your platform.
::: note
-On Android, the value of the `SCHEME` placeholder can be `https` or some other custom scheme. `https` schemes require enabling Android App Links.
+On Android, the value of the `SCHEME` placeholder can be `https` or some other custom scheme. Whenever possible, Auth0 recommends using Android App Links with `https` as a secure way to link directly to content within your app. Custom URL schemes can be subject to client impersonation attacks.
On iOS 17.4+ and macOS 14.4+ it is possible to use Universal Links (`https` scheme) as callback and logout URLs. When enabled, the SDK will fall back to using a custom URL scheme on older iOS / macOS versions –your app's bundle identifier.