authhelper: add MS login handling to BBA

[thc202]

Handle MS login through BBA.

[psiinon]

Checkmarx One – Scan Summary & Details – 2957cc4e-43e8-40e5-b59d-6ac0449435ca

New Issues (1)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	Heap_Inspection	/addOns/authhelper/src/main/java/org/zaproxy/addon/authhelper/internal/auth/DefaultAuthenticator.java: 50	details Method at line 50 of /addOns/authhelper/src/main/java/org/zaproxy/addon/authhelper/internal/auth/DefaultAuthenticator.java defines password, whic... ID: yng1ZYrEupwF1dVcRSKDpMmJ0g0%3D Attack Vector

Fixed Issues (1)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Heap_Inspection	/addOns/authhelper/src/main/java/org/zaproxy/addon/authhelper/AuthUtils.java: 627

[Copilot]

Pull Request Overview

This PR adds Microsoft login handling to Browser Based Authentication (BBA) by implementing a dedicated authenticator for Microsoft login flows. The changes introduce a new plugin-style architecture where multiple authenticators can be attempted in sequence.

Key changes:

• Introduces a new MsLoginAuthenticator class to handle Microsoft-specific login flows
• Refactors existing authentication logic into a DefaultAuthenticator
• Creates an Authenticator interface to support multiple authentication strategies

Reviewed Changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
MsLoginAuthenticator.java	New authenticator implementation for Microsoft login flows with state machine logic
DefaultAuthenticator.java	Extracted existing authentication logic into a dedicated authenticator class
Authenticator.java	New interface defining the contract for authentication implementations
AuthUtils.java	Refactored to use authenticator chain pattern and made helper methods public
Messages.properties	Added diagnostic message keys for Microsoft login steps
CHANGELOG.md	Documented the new Microsoft login support feature

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}