]> git.ipfire.org Git - thirdparty/dovecot/core.git/commitdiff
auth: oauth2 - Do not export token by default
authorAki Tuomi <aki.tuomi@open-xchange.com>
Fri, 16 Jan 2026 10:57:50 +0000 (12:57 +0200)
committeraki.tuomi <aki.tuomi@open-xchange.com>
Mon, 19 Jan 2026 14:48:38 +0000 (14:48 +0000)
It just grows auth reply needlessly, if it's needed
one can export it in oauth2.

src/auth/auth-sasl-mech-oauth2.c
src/auth/auth-worker-server.c

index 1409f844c066cc1e8d82aacf5d5428637dae75f2..e3e2a2f1e9a915d0740334ca68839fea9f303f24 100644 (file)
@@ -136,8 +136,6 @@ mech_oauth2_verify_token_local_continue(struct db_oauth2_request *db_req,
 
        if (result == PASSDB_RESULT_OK) {
                auth_request_set_password_verified(auth_request);
-               auth_request_set_field(auth_request, "token",
-                                      db_req->token, NULL);
                auth_request_lookup_credentials(auth_request, "",
                                                oauth2_verify_callback);
                auth_request_unref(&auth_request);
index 1694102a6e3cd00f8ce69eabbc7180eef5399d48..07b0874251b25b8039aaa88eb2efb68cda57c63c 100644 (file)
@@ -775,7 +775,6 @@ static void auth_worker_handle_token_continue(struct db_oauth2_request *db_reque
                str_printfa(str, "FAIL\t%d\t%s", result, error);
        else {
                str_printfa(str, "OK\t%d\t%s\t", result, db_request->username);
-               auth_request_set_field(auth_request, "token", db_request->token, "PLAIN");
                reply_append_extra_fields(str, auth_request);
        }
        str_append_c(str, '\n');