OIDC / Twake / Stalwart Integration - Does Twake support OAUTHBEARER?

[janbrg]

We are planning to set up our authentication using OIDC with Keycloak as our Identity Provider. Our goal is to seamlessly integrate Twake with Stalwart (our chosen email server).

The challenge we are currently facing is that Stalwart requires the access token validation process to be sent via the OAUTHBEARER mechanism. We would appreciate any insights from the community on this: Does Twake's OIDC implementation support sending the access token in the OAUTHBEARER format for proper integration with services like Stalwart?

Thanks in advance!

[chibenwa]

OAUTHBEARER is IMAP isn't it?

I recall it was more issues around Twake Mail client discovering stallwart OIDC stack... (.well-kown/openid-configuration VS formal OpenId discovery.

[janbrg]

For authentication, Twake first obtains the token from Keycloak and forwards it to Stalwart. Stalwart queries Keycloak's Userinfo endpoint with the token and, given the token is correct, receives the user information. Upon receiving the user information, Stalwart verifies the user status and returns the final authentication result (Confirmation or Rejection) to Twake.
So Twake needs to receive and forward the OAUTHBEARER token to Stalwart for authentication.