OAuth 2 support

[Billos]

Hello,
Is there any plan on supporting OAuth2 for account provisionning ?

[the-djmaze]

Partially with the login-gmail and login-0365 extensions, and also Nextcloud OIDC,
If you need something else feel free to implement.

[githubbbie]

Could you use generic login-gmail, login-0365 or Nexcloud OIDC for general OAuth2 support?

With the ability of increasingly amazing compution automation doing brute force password attacks, my thinking is imap username/passwords need some 2auth or more secure system moving forward in history.

For me, and maybe others, as you also have linked to docker-mailserver in a few places, I would prefer some better ability to secure my imap accounts (currently using username/password alone) on my docker-mailserver along the lines of OAuth2 implemented there that works then with snappymail with OAuth2 or similar enhancement.

Any ideas here? Maybe there is already a solution for better security between docker-mailserver and snappymail.

THANK YOU. Snappymail is amazing.

[the-djmaze]

You could use the TOTP extension.
The only benefit of this approach is prevention of login attacks where something tries to detect your password.

[githubbbie]

Yes @the-djmaze the TOTP extension for Snappymail helps improve security for Snappymail, but I'm looking deeper to the actual IMAP server also requriing something similar. Does this exist?

[the-djmaze]

Does this exist?

Read https://documentation.open-xchange.com/7.10.4/middleware/mail/dovecot/oauth_2.0_with_postfix_and_dovecot.html

[githubbbie]

Looks like Docker Mail Server recommends Authentik to handle Oauth2

https://docker-mailserver.github.io/docker-mailserver/latest/config/advanced/auth-oauth2

Worting on now, once that is going, then will work on integrating with SnappyMail, which is amazing!

[githubbbie]

Wow, filed a couple of issues in testing gmail: #1779 #1778

Got authentik working with docker, and then next step will be to try to refashion oauth2 plugins to support authentik.