From 851f8457e16967d7d92ddc7c0e6d3c2e6be2499a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Maciej=20W=C3=B3jcik?= <maciej@defguard.net>
Date: Tue, 24 Feb 2026 09:34:57 +0100
Subject: [PATCH 1/2] remove callback url

---
 core/proxy.proto | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/core/proxy.proto b/core/proxy.proto
index 2d9d081..eeafd74 100644
--- a/core/proxy.proto
+++ b/core/proxy.proto
@@ -212,7 +212,8 @@ message AuthInfoResponse {
 message AuthCallbackRequest {
   string code = 1;
   string nonce = 2;
-  string callback_url = 3;
+  // DEPRECATED(2.0): superseeded by core-generated URL
+  string callback_url = 3 [deprecated = true];
 }
 
 message AuthCallbackResponse {
@@ -223,7 +224,8 @@ message AuthCallbackResponse {
 message ClientMfaOidcAuthenticateRequest {
   string code = 1;
   string state = 2;
-  string callback_url = 3;
+  // DEPRECATED(2.0): superseeded by core-generated URL
+  string callback_url = 3 [deprecated = true];
   string nonce = 4;
 }
 

From b76289ef976e03cdd6bbf336ebac7cc02c0011cc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Maciej=20W=C3=B3jcik?= <maciej@defguard.net>
Date: Tue, 24 Feb 2026 09:35:48 +0100
Subject: [PATCH 2/2] add auth flow type

---
 core/proxy.proto | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/core/proxy.proto b/core/proxy.proto
index eeafd74..e29fbf1 100644
--- a/core/proxy.proto
+++ b/core/proxy.proto
@@ -197,9 +197,17 @@ message ClientMfaFinishResponse {
   optional string token = 2;
 }
 
+enum AuthFlowType {
+  AUTH_FLOW_TYPE_UNSPECIFIED = 0;
+  AUTH_FLOW_TYPE_ENROLLMENT = 1;
+  AUTH_FLOW_TYPE_MFA = 2;
+}
+
 message AuthInfoRequest {
-  string redirect_url = 1;
+  // DEPRECATED(2.0): superseeded by auth_flow_type
+  string redirect_url = 1 [deprecated = true];
   optional string state = 2;
+  AuthFlowType auth_flow_type = 3;
 }
 
 message AuthInfoResponse {