[Bug] Acquire token interactively with secure redirect URL

[ErRijcken]

Library version used

1.16.2

Java version

17

Scenario

PublicClient (AcquireTokenInteractive, AcquireTokenByUsernamePassword)

Is this a new or an existing app?

This is a new app or experiment

Issue description and reproduction steps

We have a Java client where we would like to use MSAL4J for fetching a token (for authentication and authorization).
This worked well using http://localhost:<port> as a redirect URL, but our Windows people advised us that the security of this setup was not optimal (we have an on-premise authority which is configured by our people). They have talked to their MS contact, who recommended them to configure the redirect URL as http://localhost:<port>/<randomString>/.
I have been unable to make my MSAL4J setup work with this. Based on debugging the browser, it seems like the call to our authority does work, but the library doesn't properly treat the response.

Relevant code snippets

No response

Expected behavior

No response

Identity provider

Azure Active Directory Federation Services (ADFS)

Regression

No response

Solution and workarounds

No response

[ErRijcken]

Ok, after a deep dive into the code (I'm by no means an expert), it seems like adding the random string in the redirect URL is not supported (see the if-block in AuthorizationResponseHandler#handle).
In my mind, it should not be hard to modify this to allow a specific redirect path. I will try to make the change.