From: Aki Tuomi <aki.tuomi@open-xchange.com>
Date: Fri, 16 Jan 2026 10:57:50 +0000 (+0200)
Subject: auth: oauth2 - Do not export token by default
X-Git-Tag: 2.4.3~328
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=9a3df97376401fda7f294ddd25e36aed309d708f;p=thirdparty%2Fdovecot%2Fcore.git

auth: oauth2 - Do not export token by default

It just grows auth reply needlessly, if it's needed
one can export it in oauth2.
---

diff --git a/src/auth/auth-sasl-mech-oauth2.c b/src/auth/auth-sasl-mech-oauth2.c
index 1409f844c0..e3e2a2f1e9 100644
--- a/src/auth/auth-sasl-mech-oauth2.c
+++ b/src/auth/auth-sasl-mech-oauth2.c
@@ -136,8 +136,6 @@ mech_oauth2_verify_token_local_continue(struct db_oauth2_request *db_req,
 
 	if (result == PASSDB_RESULT_OK) {
 		auth_request_set_password_verified(auth_request);
-		auth_request_set_field(auth_request, "token",
-				       db_req->token, NULL);
 		auth_request_lookup_credentials(auth_request, "",
 						oauth2_verify_callback);
 		auth_request_unref(&auth_request);
diff --git a/src/auth/auth-worker-server.c b/src/auth/auth-worker-server.c
index 1694102a6e..07b0874251 100644
--- a/src/auth/auth-worker-server.c
+++ b/src/auth/auth-worker-server.c
@@ -775,7 +775,6 @@ static void auth_worker_handle_token_continue(struct db_oauth2_request *db_reque
 		str_printfa(str, "FAIL\t%d\t%s", result, error);
 	else {
 		str_printfa(str, "OK\t%d\t%s\t", result, db_request->username);
-		auth_request_set_field(auth_request, "token", db_request->token, "PLAIN");
 		reply_append_extra_fields(str, auth_request);
 	}
 	str_append_c(str, '\n');