mirror of
https://github.com/docker-mailserver/docker-mailserver
synced 2026-09-24 22:18:54 +02:00
c9b015ddc8
Signed-off-by: Georg Lauterbach <44545919+georglauterbach@users.noreply.github.com> Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
27 lines
1.0 KiB
Plaintext
27 lines
1.0 KiB
Plaintext
# The OAuth2 driver is a so-called "Success/Failure Database".
|
|
# These databases simply verify if the given password is correct
|
|
# for the user. Dovecot doesn't get the correct password from the
|
|
# database, it only gets a success or a failure reply. This means
|
|
# that these databases can't be used with non-cleartext
|
|
# authentication mechanisms.
|
|
#
|
|
# This implies it cannot be configured for the non-plaintext SASL
|
|
# mechanisms listed here: https://doc.dovecot.org/2.4.3/developers/design/auth_process.html#password-databases
|
|
#
|
|
# TODO check if still valid
|
|
# However that is not the case, these mechanisms are still valid to prevent trying other incompatible mechanisms (like `plain`).
|
|
#
|
|
# REF https://doc.dovecot.org/2.4.3/core/config/auth/passdb.html#success-failure-database
|
|
# https://doc.dovecot.org/2.4.3/core/config/auth/databases/oauth2.html#open-authentication-v2-0-database-oauth2
|
|
|
|
auth_mechanisms {
|
|
oauthbearer = yes
|
|
xoauth2 = yes
|
|
}
|
|
|
|
oauth2 {
|
|
introspection_url =
|
|
introspection_mode = auth
|
|
username_attribute = email
|
|
}
|