Improve notification logging

Author: NandanPrabhu

README.md

@@ -428,6 +428,47 @@ const App = () => {
 export default App;
 ```
 
+#### Android Networking Configuration
+
+> **Platform Support:** Android only.
+
+You can configure the native networking client used by Auth0.Android for all requests (web auth, credential renewal, MFA, passkeys, etc.) by passing `networkingOptions`:
+
+```js
+import { Auth0Provider } from 'react-native-auth0';
+
+const App = () => {
+  return (
+    <Auth0Provider
+      domain="YOUR_AUTH0_DOMAIN"
+      clientId="YOUR_AUTH0_CLIENT_ID"
+      networkingOptions={{
+        connectTimeout: 30,
+        readTimeout: 30,
+        defaultHeaders: { 'X-App-Version': '1.2.3' },
+      }}
+    >
+      {/* YOUR APP */}
+    </Auth0Provider>
+  );
+};
+
+export default App;
+```
+
+Available options:
+- `connectTimeout` (seconds, default 10)
+- `readTimeout` (seconds, default 10)
+- `writeTimeout` (seconds, default 10)
+- `callTimeout` (seconds, default 0 - no limit)
+- `defaultHeaders` (key-value pairs sent on every request)
+- `enableLogging` (boolean, default false - **debug-only**, logs full request/response bodies including tokens)
+
+> [!WARNING]
+> Never enable `enableLogging` in production builds. Auth0.Android logs full HTTP bodies including access, refresh, and ID tokens in plaintext.
+
+For detailed examples, see the [Android Networking Configuration](EXAMPLES.md#android-networking-configuration) section in EXAMPLES.md.
+
 <details>
   <summary>Using the `Auth0` class</summary>
 
@@ -456,6 +497,21 @@ const auth0 = new Auth0({
 });
 ```
 
+You can also configure Android networking options:
+
+```js
+import Auth0 from 'react-native-auth0';
+
+const auth0 = new Auth0({
+  domain: 'YOUR_AUTH0_DOMAIN',
+  clientId: 'YOUR_AUTH0_CLIENT_ID',
+  networkingOptions: {
+    connectTimeout: 30,
+    readTimeout: 30,
+  },
+});
+```
+
 </details>
 
 Then import the hook into a component where you want to get access to the properties and methods for integrating with Auth0:

android/src/main/java/com/auth0/react/A0Auth0Module.kt

@@ -82,6 +82,9 @@ class A0Auth0Module(private val reactContext: ReactApplicationContext) : A0Auth0
             options.getMap("defaultHeaders")?.let { headers ->
                 builder.defaultHeaders(headers.toHashMap().mapValues { it.value?.toString() ?: "" })
             }
+            // Only honor enableLogging on debug builds: Auth0.Android logs full request/response
+            // bodies at this level, including plaintext access/refresh/ID tokens from token-endpoint
+            // responses. Test coverage in A0Auth0ModuleNetworkingOptionsTest ensures this gate holds.
             if (isDebuggable && options.hasKey("enableLogging")) {
                 builder.enableLogging(options.getBoolean("enableLogging"))
             }

android/src/test/java/com/auth0/react/A0Auth0ModuleNetworkingOptionsTest.kt

@@ -80,10 +80,10 @@ class A0Auth0ModuleNetworkingOptionsTest {
     fun `enableLogging is ignored on a non-debuggable build even when requested`() {
         server.enqueue(MockResponse().setBody("{}"))
 
-        // If the debuggable gate is ever removed, Auth0.Android attaches its logging
-        // interceptor and this request crashes ("Method ... not mocked") because
-        // android.util.Log isn't stubbed in this unit test environment - that crash is
-        // exactly the regression this test is meant to catch.
+        // SECURITY: If the isDebuggable gate is ever removed, Auth0.Android attaches its
+        // logging interceptor which logs full request/response bodies (including tokens).
+        // This test would crash ("Method android.util.Log not mocked") if that happens,
+        // catching the security regression before it ships.
         val client = A0Auth0Module.buildNetworkingClient(
             JavaOnlyMap.of("enableLogging", true),
             isDebuggable = false

src/types/common.ts

@@ -228,6 +228,15 @@ export interface Auth0Options {
  * Mirrors `DefaultClient.Builder` from the Auth0.Android SDK.
  *
  * @remarks Android only. Has no effect on iOS or web.
+ *
+ * @example
+ * ```ts
+ * networkingOptions: {
+ *   connectTimeout: 30,
+ *   readTimeout: 30,
+ *   defaultHeaders: { 'X-App-Version': '1.2.3' }
+ * }
+ * ```
  */
 export interface NetworkingOptions {
   /** Connection timeout, in seconds. @default 10 */