Step-up flow fixed (#20)

* Bug fixed in Step-up flow fixed. Missing scope being passed causing the flow to trigger recursively

* Failing test case fixed

* Added documentation for scope related changes

Author: Sudhanshu96

Auth0UniversalComponents/Core/Utils/ErrorHandler.swift

@@ -104,7 +104,8 @@ struct ErrorHandler {
                 handler.showLoader = false
                 dependencies.tokenProvider.store(
                     apiCredentials: APICredentials(from: credentials),
-                    for: dependencies.audience
+                    for: dependencies.audience,
+                    andScope: scope
                 )
                 retryCallback()
             } catch {
@@ -141,7 +142,8 @@ struct ErrorHandler {
                 .start()
                 dependencies.tokenProvider.store(
                     apiCredentials: APICredentials(from: credentials),
-                    for: dependencies.audience
+                    for: dependencies.audience,
+                    andScope: scope
                 )
                 retryCallback()
             } catch {

Auth0UniversalComponents/CredentialsManager+TokenProviderExtension.swift

@@ -22,13 +22,14 @@ extension CredentialsManager: TokenProvider {
         _ = store(credentials: credentials)
     }
 
-    /// Stores API credentials for a specific audience in the credentials manager.
+    /// Stores API credentials for a specific audience and scope in the credentials manager.
     ///
     /// - Parameters:
     ///   - apiCredentials: The API credentials to store
     ///   - audience: The API audience (e.g., "https://api.example.com")
-    public func store(apiCredentials: APICredentials, for audience: String) {
-        _ = store(apiCredentials: apiCredentials, forAudience: audience)
+    ///   - scope: The scopes associated with the credentials (space-separated)
+    public func store(apiCredentials: APICredentials, for audience: String, andScope scope: String) {
+        _ = store(apiCredentials: apiCredentials, forAudience: audience, forScope: scope)
     }
 
     /// Fetches API credentials for a specific audience and scope from the credentials manager.

Auth0UniversalComponents/TokenProvider.swift

@@ -24,18 +24,18 @@ import Combine
 ///         try? credentialsManager.store(credentials: credentials)
 ///     }
 ///
-///     func store(apiCredentials: APICredentials, for audience: String) {
-///         apiCredentialsCache[audience] = apiCredentials
+///     func store(apiCredentials: APICredentials, for audience: String, andScope scope: String) {
+///         apiCredentialsCache["\(audience)_\(scope)"] = apiCredentials
 ///     }
 ///
 ///     func fetchAPICredentials(audience: String, scope: String) async throws -> APICredentials {
-///         if let cached = apiCredentialsCache[audience] {
+///         if let cached = apiCredentialsCache["\(audience)_\(scope)"] {
 ///             return cached
 ///         }
 ///         // Fetch new API credentials
 ///         let credentials = try await Auth0.authentication()
 ///             .credentials(forAudience: audience, scope: scope)
-///         store(apiCredentials: credentials, for: audience)
+///         store(apiCredentials: credentials, for: audience, andScope: scope)
 ///         return credentials
 ///     }
 /// }
@@ -59,7 +59,8 @@ public protocol TokenProvider: Sendable {
     /// - Parameters:
     ///   - apiCredentials: The API credentials to store
     ///   - audience: The API audience (e.g., "https://api.example.com")
-    func store(apiCredentials: APICredentials, for audience: String)
+    ///   - scope: The scopes associated with the credentials (space-separated)
+    func store(apiCredentials: APICredentials, for audience: String, andScope scope: String)
 
     /// Fetches API credentials for a specific audience and scope.
     ///

Auth0UniversalComponentsTests/Mocks/MockTokenProvider.swift

@@ -10,7 +10,7 @@ struct MockTokenProvider: TokenProvider {
 
     func storeCredentials(credentials: Credentials) {}
 
-    func store(apiCredentials: APICredentials, for audience: String) {}
+    func store(apiCredentials: APICredentials, for audience: String, andScope scope: String) {}
 
     func fetchAPICredentials(audience: String, scope: String) async throws -> APICredentials {
         APICredentials(accessToken: "mock-access-token", tokenType: "Bearer", expiresIn: Date(), scope: "openid profile offline_access")