OAuth: Support standard authentication with short-living password received with OIDC token (#9530)

This commit is contained in:
Aleksander Machniak
2024-08-29 13:17:01 +02:00
parent a134c83f14
commit 0cf65ad2b1
3 changed files with 53 additions and 8 deletions

View File

@@ -411,6 +411,13 @@ $config['oauth_user_create_map'] = [
'language' => ['locale'],
];
// Optional: For backends that don't support XOAUTH2/OAUTHBEARER method we can still use
// OpenIDC protocol to get a short-living password (claim) for the user to log into IMAP/SMTP.
// That password have to have (at least) the same expiration time as the token, and will be
// renewed on token refresh.
// Note: The claim have to be added to 'oauth_scope' above.
$config['oauth_password_claim'] = null;
// /// Example config for Gmail
// Register your service at https://console.developers.google.com/