Veena/mob onb2

IdentityCore/src/MSIDError.h

@@ -215,6 +215,9 @@ typedef NS_ENUM(NSInteger, MSIDErrorCode)
 
     // Workplacejoin device upgrade registration required for device.
     MSIDErrorInsufficientDeviceStrength = -51732,
+
+    MSIDErrorMDMEnrollmentCompletedNeedsRetry = -51733,
+
     /*!
      =========================================================
      Broker flow errors    (518xx and 519xx) - MSIDErrorDomain

IdentityCore/src/MSIDError.m

@@ -332,6 +332,8 @@ void MSIDFillAndLogError(NSError **error, MSIDErrorCode errorCode, NSString *err
             return @"MSIDErrorUINotSupportedInExtension";
         case MSIDErrorInsufficientDeviceStrength:
             return @"MSIDErrorInsufficientDeviceStrength";
+        case MSIDErrorMDMEnrollmentCompletedNeedsRetry:
+            return @"MSIDErrorMDMEnrollmentCompletedNeedsRetry";
             // Broker flow errors
         case MSIDErrorBrokerResponseNotReceived:
             return @"MSIDErrorBrokerResponseNotReceived";

IdentityCore/src/configuration/webview/MSIDAuthorizeWebRequestConfiguration.m

@@ -65,4 +65,19 @@ - (MSIDWebviewResponse *)responseWithResultURL:(NSURL *)url
                                    error:error];
 }
 
+- (MSIDWebviewResponse *)responseWithResultURL:(NSURL *)url
+                                       factory:(MSIDWebviewFactory *)factory
+                               responseHeaders:(NSDictionary<NSString *, NSString *> *)lastResponseHeaders
+                                       context:(id<MSIDRequestContext>)context
+                                         error:(NSError *__autoreleasing*)error
+{
+    return [factory oAuthResponseWithURL:url
+                            requestState:self.state
+                      ignoreInvalidState:self.ignoreInvalidState
+                          endRedirectUri:self.endRedirectUrl
+                         responseHeaders:lastResponseHeaders
+                                 context:context
+                                   error:error];
+}
+
 @end

IdentityCore/src/configuration/webview/MSIDBaseWebRequestConfiguration.h

@@ -84,6 +84,12 @@ NS_ASSUME_NONNULL_BEGIN
                                                 context:(nullable id<MSIDRequestContext>)context
                                                   error:(NSError * _Nullable __autoreleasing * _Nullable)error;
 
+- (nullable MSIDWebviewResponse *)responseWithResultURL:(NSURL *)url
+                                                factory:(MSIDWebviewFactory *)factory
+                                        responseHeaders:(NSDictionary<NSString *, NSString *> *)lastResponseHeaders
+                                                context:(nullable id<MSIDRequestContext>)context
+                                                  error:(NSError * _Nullable __autoreleasing * _Nullable)error;
+
 @end
 
 NS_ASSUME_NONNULL_END

IdentityCore/src/configuration/webview/MSIDBaseWebRequestConfiguration.m

@@ -69,4 +69,14 @@ - (MSIDWebviewResponse *)responseWithResultURL:(__unused NSURL *)url
     return nil;
 }
 
+- (MSIDWebviewResponse *)responseWithResultURL:(NSURL *)url
+                                       factory:(MSIDWebviewFactory *)factory
+                               responseHeaders:(NSDictionary<NSString *, NSString *> *)lastResponseHeaders
+                                       context:(id<MSIDRequestContext>)context
+                                         error:(NSError *__autoreleasing*)error
+{
+    // Default implementation ignores responseHeaders parameter for backward compatibility
+    return [self responseWithResultURL:url factory:factory context:context error:error];
+}
+
 @end

IdentityCore/src/controllers/MSIDLocalInteractiveController+Internal.h

@@ -23,13 +23,35 @@
 
 #import "MSIDLocalInteractiveController.h"
 
+@class MSIDWebMDMInstallProfileResponse;
+@class MSIDWebMDMEnrollmentCompletionResponse;
+
 NS_ASSUME_NONNULL_BEGIN
 
 @interface MSIDLocalInteractiveController ()
 
+/*!
+ Whether BRT acquisition has been attempted in this session.
+ BRT acquisition logic (simplified):
+ - Acquired on FIRST msauth:// or browser:// redirect if needed
+ - Only ONE attempt per session (no retry)
+
+ Check before acquisition: !brtAcquired && !brtAttemptAttempted
+ */
+@property (nonatomic, assign) BOOL brtAttempted;
+
+/*! Whether BRT was successfully acquired in this session */
+@property (nonatomic, assign) BOOL brtAcquired;
+
 - (void)acquireTokenWithRequest:(MSIDInteractiveTokenRequest *)request
                 completionBlock:(MSIDRequestCompletionBlock)completionBlock;
 
+//- (void)handleWebMDMInstallProfileResponse:(MSIDWebMDMInstallProfileResponse *)mdmInstallProfileResponse
+//                                completion:(MSIDRequestCompletionBlock)completionBlock;
+//
+//- (void)handleWebMDMEnrollmentCompletionResponse:(MSIDWebMDMEnrollmentCompletionResponse *)mdmEnrollmentCompletionResponse
+//                                      completion:(MSIDRequestCompletionBlock)completionBlock;
+
 @end
 
 NS_ASSUME_NONNULL_END

IdentityCore/src/controllers/MSIDLocalInteractiveController.h

@@ -25,11 +25,13 @@
 #import "MSIDBaseRequestController.h"
 #import "MSIDTokenRequestProviding.h"
 #import "MSIDRequestControlling.h"
+#import "MSIDWebviewSpecialNavigationDelegate.h"
 
 @class MSIDInteractiveTokenRequestParameters;
 @class MSIDWebWPJResponse;
 
-@interface MSIDLocalInteractiveController : MSIDBaseRequestController <MSIDRequestControlling>
+
+@interface MSIDLocalInteractiveController : MSIDBaseRequestController <MSIDRequestControlling, MSIDWebviewSpecialNavigationDelegate>
 
 @property (nonatomic, readonly, nullable) MSIDInteractiveTokenRequestParameters *interactiveRequestParamaters;