Migrate Native Auth test email provider to Mail.tm, Fixes AB#3720943

[Disha Janardhan (djanardhan98)]

Summary

• Replace the Native Auth 1secmail inbox integration with authenticated Mail.tm mailboxes.
• Pass the Mail.tm password through the existing Gradle BuildConfig/BuildValues pattern without committing credentials.
• Add checkpoint-aware OTP polling, resend handling, MIME-aware OTP extraction, and bounded retries.
• Force HTTP/1.1 for compatibility with the existing OkHttp client and Mail.tm.
• Remove obsolete 1secmail response models and add regression coverage for the Mail.tm transport and inbox behavior.

Motivation

Native Auth end-to-end tests need both dynamically created signup inboxes and an authenticated persistent inbox for SSPR. Mail.tm supports both workflows, while the previous unauthenticated 1secmail integration cannot support the persistent SSPR mailbox used by the re-enabled tests.

Validation

• .\gradlew.bat :testutils:clean :testutils:assembleDebug :testutils:testDebugUnitTest --no-daemon: passed locally.
• All MSAL tests passed after applying the corresponding MSAL changes against Common commit ddb306a3884f9621e53b6eb3256fc14ea1497c7c.
• The corresponding MSAL changes will be submitted in a separate PR.

Pipeline configuration

• The MSAL consumer-validation task passes the secured Azure DevOps variable EMAIL_PROVIDER_PASSWORD from the pipeline's linked variable groups to Common as -PemailProviderPassword=$(EMAIL_PROVIDER_PASSWORD); Common exposes it through generated BuildConfig and BuildValues without committing the secret.

Related work

• Fixes AB#3720943
• Re-enable Native Auth SSPR tests with Mail.tm, Fixes AB#3729032 microsoft-authentication-library-for-android#2553

Merge sequencing

This PR is the expand step of a cross-repository migration: it temporarily retains generateRandomEmailAddressLocally() so both dev branches remain buildable. After AzureAD/microsoft-authentication-library-for-android#2553 migrates callers to createRandomEmailAddress() or generateRandomUnregisteredEmailAddress() and merges, the compatibility method will be removed in a Common follow-up.

[Copilot]

Pull request overview

This pull request migrates Native Auth end-to-end test email handling from the unauthenticated 1secmail integration to Mail.tm, aligning the testutils infrastructure with workflows that require authenticated and persistent inbox access while keeping secrets out of source control via the existing Gradle BuildConfig/BuildValues pattern.

Changes:

• Replaced the temporary email provider implementation with a Mail.tm-backed transport + API wrapper, including authenticated inbox creation, OTP polling/checkpointing, and MIME-aware OTP extraction.
• Removed obsolete 1secmail response models and added unit tests covering Mail.tm transport behavior and inbox/OTP retrieval logic.
• Wired the email provider password through Gradle build config and CI pipeline parameters.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
testutils/src/test/java/com/microsoft/identity/internal/testutils/nativeauth/api/TemporaryEmailServiceTest.kt	Adds focused unit tests for Mail.tm transport, checkpointed polling, OTP extraction, and retry behavior.
testutils/src/main/java/com/microsoft/identity/internal/testutils/nativeauth/api/TemporaryEmailService.kt	Replaces the 1secmail implementation with authenticated Mail.tm inbox lifecycle, polling logic, and an OkHttp-based transport forced to HTTP/1.1.
testutils/src/main/java/com/microsoft/identity/internal/testutils/nativeauth/api/models/InboxContent.kt	Removes obsolete 1secmail inbox response model.
testutils/src/main/java/com/microsoft/identity/internal/testutils/nativeauth/api/models/EmailContent.kt	Removes obsolete 1secmail email response model.
common4j/src/testFixtures/java/com/microsoft/identity/common/nativeauth/ApiConstants.kt	Updates the temporary mail service base URL to Mail.tm.
common4j/src/main/com/microsoft/identity/common/java/nativeauth/BuildValues.java	Exposes the Mail.tm password via BuildValues.getEmailProviderPassword().
common4j/build.gradle	Adds the emailProviderPassword Gradle property and surfaces it via generated BuildConfig.
changelog.txt	Records the migration in vNext.
azure-pipelines/pull-request-validation/build-consumers.yml	Passes EMAIL_PROVIDER_PASSWORD into the Gradle invocation for consumer validation.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[fadidurah]

LGTM, special emphasis on porting the build.gradle property to our weekly and monthly pipeline

[Disha Janardhan (djanardhan98)]

Copilot resolve the merge conflicts in this pull request

[Copilot]

Copilot resolve the merge conflicts in this pull request

Resolved by merging origin/dev into this branch and updating the PR branch tip in commit 294bfae.

[Disha Janardhan (djanardhan98)]

Copilot resolve the merge conflicts in this pull request

[Copilot]

Copilot resolve the merge conflicts in this pull request

Resolved by merging origin/dev into this branch in commit cc558c6.