Snappymail forgets credentials after oidc-login

[SoleroTG]

Description
As soon as I login in to nextcloud via my IdP instead of the internal nextcloud authentication my stored email credentials to my mailbox vanish. How can I make snappymail remember my credentials no matter how I log in?

To Reproduce

1. Login to nextcloud via nextcloud internal authentication.
2. Store credentials at example.com/settings/user/additional
3. Logout, login via nextcloud authentication and open snappymail → works
4. Logout, login via IdP. → Snappymail asks for password.

Expected behavior
Snappymail remembers my credentials no matter how I log in.

Please complete the following information:

• Browser: firefox 129
• IMAP daemon: dovecot
• PHP version: 8.2.2
• SnappyMail Version: 2.37.2
• Mode: nextcloud in docker
• IdP: Authelia

What do I miss to make it work?

[cm-schl]

Do you have the same problem if you login using the IdP and then set the credentials under /settings/user/additional?

[SoleroTG]

Yes the credentials are forgotten immediately if I enter them under /settings/user/additional while being logged in via IdP. Even if I open it in another tab with the nextcloud-SnappyMail addon or open it in the same tab I get the SnappyMail-login-mask as if I hadn't provided my credentials before.
If I am logged-in via IdP and visit the SnappyMail login-mask inside nextcloud and login there, then the credentials are stored during my browser session. Nevertheless, the credentials are lost the moment I logout of nextcloud.

I tried fiddling with #1298 and set nextcloud as my primary domain and tried other login methods at /settings/admin/additional without success.

[cm-schl]

I'm asking myself if this is a SnappyMail or a Nextcloud problem... I know Nextcloud has some mechanism to save credentials in an encrypted way by securing it with the primary credentials. As you are using a IdP maybe this has something to do with your problem... But I'm really not sure...

[SoleroTG]

I did a little bit more research and found the following:

As already described logging in plainly in nextcloud without oidc works in regard of credential storing. So I did the following:

1. Log in without oidc and store credentials under /settings/user/additional
2. Verify the credentials work by starting the SnappyMail-nextcloud-app → works
3. Log out of nextcloud and login with oidc provider
4. Start the SnappyMail-nextcloud-app

As before the login didn't work, but I have the log file from SnappyMail below in Loglevel 4 and 7.
It appears to me as a problem in SnappyMail. Am I correct or do I miss something?

In Loglevel 4

<snip>
[2024-08-24 09:04:00.268][61951ff1] IMAP[WARNING]: MailSo\Imap\Exceptions\NegativeResponseException: AUTHENTICATIONFAILED Authentication failed. in /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/MailSo/Imap/ResponseCollection.php:46
Stack trace:
#0 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/MailSo/Imap/ImapClient.php(528): MailSo\Imap\ResponseCollection->validate()
#1 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/MailSo/Imap/ImapClient.php(166): MailSo\Imap\ImapClient->getResponse()
#2 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Model/Account.php(264): MailSo\Imap\ImapClient->Login(Object(MailSo\Imap\Settings))
#3 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Model/Account.php(206): RainLoop\Model\Account->netClientLogin(Object(MailSo\Imap\ImapClient), Object(RainLoop\Plugins\Manager))
#4 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Actions/UserAuth.php(459): RainLoop\Model\Account->ImapConnectAndLogin(Object(RainLoop\Plugins\Manager), Object(MailSo\Imap\ImapClient), Object(RainLoop\Config\Application))
#5 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Actions/UserAuth.php(170): RainLoop\Actions->imapConnect(Object(RainLoop\Model\MainAccount), true)
#6 /var/www/html/custom_apps/snappymail/lib/Util/SnappyMailHelper.php(97): RainLoop\Actions->LoginProcess('*******', Object(SnappyMail\SensitiveString))
#7 /var/www/html/custom_apps/snappymail/lib/Controller/PageController.php(50): OCA\SnappyMail\Util\SnappyMailHelper::startApp()
#8 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(232): OCA\SnappyMail\Controller\PageController->index()
#9 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(138): OC\AppFramework\Http\Dispatcher->executeController(Object(OCA\SnappyMail\Controller\PageController), 'index')
#10 /var/www/html/lib/private/AppFramework/App.php(184): OC\AppFramework\Http\Dispatcher->dispatch(Object(OCA\SnappyMail\Controller\PageController), 'index')
#11 /var/www/html/lib/private/Route/Router.php(338): OC\AppFramework\App::main('PageController', 'index', Object(OC\AppFramework\DependencyInjection\DIContainer), Array)
#12 /var/www/html/lib/base.php(1053): OC\Route\Router->match('/apps/snappymai...')
#13 /var/www/html/index.php(49): OC::handleRequest()
#14 {main}
[2024-08-24 09:04:00.272][61951ff1] Nextcloud[ERROR]: AuthError[102]

</snip>

Same Log but in Level 7:

<snip>
[2024-08-24 09:38:08.186][9f8f9ae8] [INFO]: [SM:2.37.2][IP:<IP>][PID:71][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/]
[2024-08-24 09:38:08.188][9f8f9ae8] Nextcloud[DEBUG]: integrated
[2024-08-24 09:38:08.190][9f8f9ae8] IMAP[INFO]: Start connection to "tcp://mda-dovecot:14300"
[2024-08-24 09:38:08.191][9f8f9ae8] IMAP[INFO]: Connect (success)
[2024-08-24 09:38:08.191][9f8f9ae8] IMAP[DEBUG]: 0.00075197219848633 (raw connection)
[2024-08-24 09:38:08.197][9f8f9ae8] IMAP[INFO]: < * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.\r\n
[2024-08-24 09:38:08.198][9f8f9ae8] IMAP[DEBUG]: 0.0077700614929199 (*)
[2024-08-24 09:38:08.198][9f8f9ae8] PLUGIN[INFO]: Hook: imap.before-login
[2024-08-24 09:38:08.198][9f8f9ae8] IMAP[INFO]: > TAG1 AUTHENTICATE PLAIN *******\r\n
[2024-08-24 09:38:10.207][9f8f9ae8] IMAP[INFO]: < TAG1 NO [AUTHENTICATIONFAILED] Authentication failed.\r\n
[2024-08-24 09:38:10.207][9f8f9ae8] IMAP[DEBUG]: 2.0089900493622 (TAG1)
[2024-08-24 09:38:10.208][9f8f9ae8] IMAP[WARNING]: MailSo\Imap\Exceptions\NegativeResponseException: AUTHENTICATIONFAILED Authentication failed. in /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/MailSo/Imap/ResponseCollection.php:46
Stack trace:
#0 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/MailSo/Imap/ImapClient.php(528): MailSo\Imap\ResponseCollection->validate()
#1 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/MailSo/Imap/ImapClient.php(166): MailSo\Imap\ImapClient->getResponse()
#2 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Model/Account.php(264): MailSo\Imap\ImapClient->Login(Object(MailSo\Imap\Settings))
#3 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Model/Account.php(206): RainLoop\Model\Account->netClientLogin(Object(MailSo\Imap\ImapClient), Object(RainLoop\Plugins\Manager))
#4 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Actions/UserAuth.php(459): RainLoop\Model\Account->ImapConnectAndLogin(Object(RainLoop\Plugins\Manager), Object(MailSo\Imap\ImapClient), Object(RainLoop\Config\Application))
#5 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Actions/UserAuth.php(170): RainLoop\Actions->imapConnect(Object(RainLoop\Model\MainAccount), true)
#6 /var/www/html/custom_apps/snappymail/lib/Util/SnappyMailHelper.php(97): RainLoop\Actions->LoginProcess('*******', Object(SnappyMail\SensitiveString))
#7 /var/www/html/custom_apps/snappymail/lib/Controller/PageController.php(50): OCA\SnappyMail\Util\SnappyMailHelper::startApp()
#8 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(232): OCA\SnappyMail\Controller\PageController->index()
#9 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(138): OC\AppFramework\Http\Dispatcher->executeController(Object(OCA\SnappyMail\Controller\PageController), 'index')
#10 /var/www/html/lib/private/AppFramework/App.php(184): OC\AppFramework\Http\Dispatcher->dispatch(Object(OCA\SnappyMail\Controller\PageController), 'index')
#11 /var/www/html/lib/private/Route/Router.php(338): OC\AppFramework\App::main('PageController', 'index', Object(OC\AppFramework\DependencyInjection\DIContainer), Array)
#12 /var/www/html/lib/base.php(1053): OC\Route\Router->match('/apps/snappymai...')
#13 /var/www/html/index.php(49): OC::handleRequest()
#14 {main}
[2024-08-24 09:38:10.208][9f8f9ae8] IMAP[NOTICE]: MailSo\Imap\Exceptions\NegativeResponseException: AUTHENTICATIONFAILED Authentication failed. in /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/MailSo/Imap/ResponseCollection.php:46
Stack trace:
#0 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/MailSo/Imap/ImapClient.php(528): MailSo\Imap\ResponseCollection->validate()
#1 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/MailSo/Imap/ImapClient.php(166): MailSo\Imap\ImapClient->getResponse()
#2 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Model/Account.php(264): MailSo\Imap\ImapClient->Login(Object(MailSo\Imap\Settings))
#3 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Model/Account.php(206): RainLoop\Model\Account->netClientLogin(Object(MailSo\Imap\ImapClient), Object(RainLoop\Plugins\Manager))
#4 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Actions/UserAuth.php(459): RainLoop\Model\Account->ImapConnectAndLogin(Object(RainLoop\Plugins\Manager), Object(MailSo\Imap\ImapClient), Object(RainLoop\Config\Application))
#5 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Actions/UserAuth.php(170): RainLoop\Actions->imapConnect(Object(RainLoop\Model\MainAccount), true)
#6 /var/www/html/custom_apps/snappymail/lib/Util/SnappyMailHelper.php(97): RainLoop\Actions->LoginProcess('*******', Object(SnappyMail\SensitiveString))
#7 /var/www/html/custom_apps/snappymail/lib/Controller/PageController.php(50): OCA\SnappyMail\Util\SnappyMailHelper::startApp()
#8 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(232): OCA\SnappyMail\Controller\PageController->index()
#9 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(138): OC\AppFramework\Http\Dispatcher->executeController(Object(OCA\SnappyMail\Controller\PageController), 'index')
#10 /var/www/html/lib/private/AppFramework/App.php(184): OC\AppFramework\Http\Dispatcher->dispatch(Object(OCA\SnappyMail\Controller\PageController), 'index')
#11 /var/www/html/lib/private/Route/Router.php(338): OC\AppFramework\App::main('PageController', 'index', Object(OC\AppFramework\DependencyInjection\DIContainer), Array)
#12 /var/www/html/lib/base.php(1053): OC\Route\Router->match('/apps/snappymai...')
#13 /var/www/html/index.php(49): OC::handleRequest()
#14 {main}

Next MailSo\Imap\Exceptions\LoginBadCredentialsException: AUTHENTICATIONFAILED Authentication failed. in /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/MailSo/Imap/ImapClient.php:232
Stack trace:
#0 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Model/Account.php(264): MailSo\Imap\ImapClient->Login(Object(MailSo\Imap\Settings))
#1 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Model/Account.php(206): RainLoop\Model\Account->netClientLogin(Object(MailSo\Imap\ImapClient), Object(RainLoop\Plugins\Manager))
#2 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Actions/UserAuth.php(459): RainLoop\Model\Account->ImapConnectAndLogin(Object(RainLoop\Plugins\Manager), Object(MailSo\Imap\ImapClient), Object(RainLoop\Config\Application))
#3 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.2/app/libraries/RainLoop/Actions/UserAuth.php(170): RainLoop\Actions->imapConnect(Object(RainLoop\Model\MainAccount), true)
#4 /var/www/html/custom_apps/snappymail/lib/Util/SnappyMailHelper.php(97): RainLoop\Actions->LoginProcess('*******', Object(SnappyMail\SensitiveString))
#5 /var/www/html/custom_apps/snappymail/lib/Controller/PageController.php(50): OCA\SnappyMail\Util\SnappyMailHelper::startApp()
#6 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(232): OCA\SnappyMail\Controller\PageController->index()
#7 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(138): OC\AppFramework\Http\Dispatcher->executeController(Object(OCA\SnappyMail\Controller\PageController), 'index')
#8 /var/www/html/lib/private/AppFramework/App.php(184): OC\AppFramework\Http\Dispatcher->dispatch(Object(OCA\SnappyMail\Controller\PageController), 'index')
#9 /var/www/html/lib/private/Route/Router.php(338): OC\AppFramework\App::main('PageController', 'index', Object(OC\AppFramework\DependencyInjection\DIContainer), Array)
#10 /var/www/html/lib/base.php(1053): OC\Route\Router->match('/apps/snappymai...')
#11 /var/www/html/index.php(49): OC::handleRequest()
#12 {main}
[2024-08-24 09:38:10.213][9f8f9ae8] Nextcloud[ERROR]: AuthError[102]
[2024-08-24 09:38:10.213][9f8f9ae8] PLUGIN[INFO]: Hook: filter.language
[2024-08-24 09:38:10.248][9f8f9ae8] [INFO]: Memory peak usage: 10MB
[2024-08-24 09:38:10.248][9f8f9ae8] [INFO]: Time delta: 2.0985910892487
[2024-08-24 09:38:10.249][9f8f9ae8] IMAP[INFO]: Disconnected from "tcp://mda-dovecot:14300" (success)
[2024-08-24 09:38:10.249][9f8f9ae8] IMAP[DEBUG]: 2.059406042099 (net session)
[2024-08-24 09:38:10.365][464b38ac] [INFO]: [SM:2.37.2][IP:<IP>][PID:62][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/?/AppData/0/3481095053236738/]
[2024-08-24 09:38:10.367][464b38ac] Nextcloud[DEBUG]: integrated
[2024-08-24 09:38:10.367][464b38ac] Nextcloud[DEBUG]: snappymail-autologin is off
[2024-08-24 09:38:10.368][464b38ac] PLUGIN[INFO]: Hook: filter.language
[2024-08-24 09:38:10.368][464b38ac] PLUGIN[INFO]: Hook: filter.app-data
[2024-08-24 09:38:10.368][464b38ac] Nextcloud[DEBUG]: snappymail-autologin is off
[2024-08-24 09:38:10.369][464b38ac] [INFO]: Memory peak usage: 8MB
[2024-08-24 09:38:10.369][464b38ac] [INFO]: Time delta: 0.039388179779053
[2024-08-24 09:38:10.839][ec227d7e] [INFO]: [SM:2.37.2][IP:<IP>][PID:1827][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/?/Plugins/0/User/5a2a69218199d20f8a577ebb45c69f37/]
[2024-08-24 09:38:10.841][ec227d7e] Nextcloud[DEBUG]: integrated
[2024-08-24 09:38:10.842][ec227d7e] Nextcloud[DEBUG]: snappymail-autologin is off
[2024-08-24 09:38:10.844][ec227d7e] [INFO]: Memory peak usage: 10MB
[2024-08-24 09:38:10.844][ec227d7e] [INFO]: Time delta: 0.12370896339417
[2024-08-24 09:38:10.955][51229ca6] [INFO]: [SM:2.37.2][IP:<IP>][PID:60][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/?/Css/0/User/-/NextcloudV25+/-/1724492290898/Hash/-/Json/]
[2024-08-24 09:38:10.956][51229ca6] Nextcloud[DEBUG]: integrated
[2024-08-24 09:38:10.957][51229ca6] Nextcloud[DEBUG]: snappymail-autologin is off
[2024-08-24 09:38:10.959][51229ca6] [INFO]: Memory peak usage: 10MB
[2024-08-24 09:38:10.959][51229ca6] [INFO]: Time delta: 0.042228937149048
</snip>

[cm-schl]

Have you checked if the password that is sent to your IMAP Server is the correct one? As said, I have doubts that Nextcloud can decrypt the password previously saved when you log in as normal user without using your IdP.

Inside the SnappyMail advanced settings you can activate to write the passwords in clear text into the logs. When you retry the same steps as done here, you should see the correct password and not only an other string... Certainly you should not send us those logs, but this could help us to understand what is going on 🙂

[SoleroTG]

The password is definitely correct as I copy it from keepass every time I need it. It works flawlessly if I enter it in the Snappymail-login-mask. Furthermore, the nextcloud internal mail client can manage to access the stored password when logged in via IdP. I guess that the nextcloud mail client uses the same interface for accessing its credentials as every other app.

I added some logs below in level 7 with passwords shown:

Storing of password while being logged in via IdP

[2024-08-30 10:04:46.274][75eab676] [INFO]: [SM:2.37.3][IP:<IP>][PID:42472][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][POST http://cloud.example.com/index.php/apps/snappymail/fetch/personal.php]
[2024-08-30 10:04:46.275][75eab676] Nextcloud[DEBUG]: integrated
[2024-08-30 10:04:46.276][75eab676] [INFO]: Memory peak usage: 8MB
[2024-08-30 10:04:46.276][75eab676] [INFO]: Time delta: 0.041125059127808

Unsuccessful try to log in with the perhaps saved credentials while being logged in via IdP

Next MailSo\Imap\Exceptions\LoginBadCredentialsException: AUTHENTICATIONFAILED Authentication failed. in /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/MailSo/Imap/ImapClient.php:232
Stack trace:
#0 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/RainLoop/Model/Account.php(264): MailSo\Imap\ImapClient->Login(Object(MailSo\Imap\Settings))
#1 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/RainLoop/Model/Account.php(206): RainLoop\Model\Account->netClientLogin(Object(MailSo\Imap\ImapClient), Object(RainLoop\Plugins\Manager))
#2 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/RainLoop/Actions/UserAuth.php(460): RainLoop\Model\Account->ImapConnectAndLogin(Object(RainLoop\Plugins\Manager), Object(MailSo\Imap\ImapClient), Object(RainLoop\Config\Application))
#3 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/RainLoop/Actions/UserAuth.php(170): RainLoop\Actions->imapConnect(Object(RainLoop\Model\MainAccount), true)
#4 /var/www/html/custom_apps/snappymail/lib/Util/SnappyMailHelper.php(97): RainLoop\Actions->LoginProcess('[email protected]', Object(SnappyMail\SensitiveString))
#5 /var/www/html/custom_apps/snappymail/lib/Controller/PageController.php(50): OCA\SnappyMail\Util\SnappyMailHelper::startApp()
#6 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(232): OCA\SnappyMail\Controller\PageController->index()
#7 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(138): OC\AppFramework\Http\Dispatcher->executeController(Object(OCA\SnappyMail\Controller\PageController), 'index')
#8 /var/www/html/lib/private/AppFramework/App.php(184): OC\AppFramework\Http\Dispatcher->dispatch(Object(OCA\SnappyMail\Controller\PageController), 'index')
#9 /var/www/html/lib/private/Route/Router.php(338): OC\AppFramework\App::main('PageController', 'index', Object(OC\AppFramework\DependencyInjection\DIContainer), Array)
#10 /var/www/html/lib/base.php(1053): OC\Route\Router->match('/apps/snappymai...')
#11 /var/www/html/index.php(49): OC::handleRequest()
#12 {main}
[2024-08-30 09:56:51.101][b8659bb1] Nextcloud[ERROR]: AuthError[102]
[2024-08-30 09:56:51.101][b8659bb1] PLUGIN[INFO]: Hook: filter.language
[2024-08-30 09:56:51.154][b8659bb1] [INFO]: Memory peak usage: 10MB
[2024-08-30 09:56:51.155][b8659bb1] [INFO]: Time delta: 1.6268811225891
[2024-08-30 09:56:51.158][b8659bb1] IMAP[INFO]: Disconnected from "tcp://mda-dovecot:14300" (success)
[2024-08-30 09:56:51.159][b8659bb1] IMAP[DEBUG]: 1.5805199146271 (net session)
[2024-08-30 09:56:51.302][bcdbc8fe] [INFO]: [SM:2.37.3][IP:<IP>][PID:42142][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/?/AppData/0/8277720432435103/]
[2024-08-30 09:56:51.302][bcdbc8fe] Nextcloud[DEBUG]: integrated
[2024-08-30 09:56:51.303][bcdbc8fe] PLUGIN[INFO]: Hook: filter.language
[2024-08-30 09:56:51.303][bcdbc8fe] PLUGIN[INFO]: Hook: filter.app-data
[2024-08-30 09:56:51.304][bcdbc8fe] [INFO]: Memory peak usage: 8MB
[2024-08-30 09:56:51.304][bcdbc8fe] [INFO]: Time delta: 0.056750059127808
[2024-08-30 09:56:51.432][0ec848b0] [INFO]: [SM:2.37.3][IP:<IP>][PID:81255][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/?/Css/0/User/-/NextcloudV25+/-/1725011811371/Hash/-/Json/]
[2024-08-30 09:56:51.433][0ec848b0] Nextcloud[DEBUG]: integrated
[2024-08-30 09:56:51.436][0ec848b0] [INFO]: Memory peak usage: 10MB
[2024-08-30 09:56:51.436][0ec848b0] [INFO]: Time delta: 0.038290977478027

Successful log in with the saved credentials while being logged directly into nextcloud without IdP

[2024-08-30 11:04:20.624][8c1de8fa] [INFO]: [SM:2.37.3][IP:<IP>][PID:84715][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/]
[2024-08-30 11:04:20.624][8c1de8fa] Nextcloud[DEBUG]: integrated
[2024-08-30 11:04:20.626][8c1de8fa] IMAP[INFO]: Start connection to "tcp://mda-dovecot:14300"
[2024-08-30 11:04:20.627][8c1de8fa] IMAP[INFO]: Connect (success)
[2024-08-30 11:04:20.627][8c1de8fa] IMAP[DEBUG]: 0.00065398216247559 (raw connection)
[2024-08-30 11:04:20.633][8c1de8fa] IMAP[INFO]: < * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.\r\n
[2024-08-30 11:04:20.634][8c1de8fa] IMAP[DEBUG]: 0.0076918601989746 (*)
[2024-08-30 11:04:20.634][8c1de8fa] PLUGIN[INFO]: Hook: imap.before-login
[2024-08-30 11:04:20.635][8c1de8fa] IMAP[INFO]: > TAG1 AUTHENTICATE PLAIN <snip>\r\n
[2024-08-30 11:04:20.654][8c1de8fa] IMAP[INFO]: < TAG1 OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE SNIPPET=FUZZY PREVIEW=FUZZY PREVIEW STATUS=SIZE SAVEDATE LITERAL+ NOTIFY SPECIAL-USE QUOTA ACL RIGHTS=texk] Logged in\r\n
[2024-08-30 11:04:20.654][8c1de8fa] IMAP[DEBUG]: 0.019535064697266 (TAG1)
[2024-08-30 11:04:20.655][8c1de8fa] TOKENS[DEBUG]: New SESSION_TOKEN
[2024-08-30 11:04:20.655][8c1de8fa] COOKIE[DEBUG]: set smsession
[2024-08-30 11:04:20.656][8c1de8fa] COOKIE[DEBUG]: set smaccount
[2024-08-30 11:04:20.656][8c1de8fa] COOKIE[DEBUG]: set smremember
[2024-08-30 11:04:20.656][8c1de8fa] PLUGIN[INFO]: Hook: filter.language
[2024-08-30 11:04:20.661][8c1de8fa] PHP[CRITICAL]: Caught SIGCHLD {"signo":17,"errno":0,"code":1,"status":1,"utime":0,"stime":0,"pid":87797,"uid":33}
[2024-08-30 11:04:20.712][8c1de8fa] [INFO]: Memory peak usage: 12MB
[2024-08-30 11:04:20.712][8c1de8fa] [INFO]: Time delta: 0.13162684440613
[2024-08-30 11:04:20.712][8c1de8fa] IMAP[INFO]: > TAG2 LOGOUT\r\n
[2024-08-30 11:04:20.713][8c1de8fa] IMAP[INFO]: < * BYE Logging out\r\n
[2024-08-30 11:04:20.713][8c1de8fa] IMAP[INFO]: < TAG2 OK Logout completed (0.001 + 0.000 secs).\r\n
[2024-08-30 11:04:20.714][8c1de8fa] IMAP[DEBUG]: 0.0012819766998291 (TAG2)
[2024-08-30 11:04:20.714][8c1de8fa] IMAP[INFO]: Disconnected from "tcp://mda-dovecot:14300" (success)
[2024-08-30 11:04:20.714][8c1de8fa] IMAP[DEBUG]: 0.087473154067993 (net session)
[2024-08-30 11:04:20.840][4c579d8c] [INFO]: [SM:2.37.3][IP:<IP>][PID:87633][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/?/AppData/0/6662732344325859/]
[2024-08-30 11:04:20.841][4c579d8c] Nextcloud[DEBUG]: integrated
[2024-08-30 11:04:20.846][4c579d8c] PHP[CRITICAL]: Caught SIGCHLD {"signo":17,"errno":0,"code":1,"status":1,"utime":0,"stime":0,"pid":87799,"uid":33}
[2024-08-30 11:04:20.847][4c579d8c] SQL[INFO]: SELECT MAX(value_int) FROM rainloop_system WHERE sys_name = ?
[2024-08-30 11:04:20.847][4c579d8c] SQL[INFO]: SELECT id_user FROM rainloop_users WHERE rl_email = :rl_email
[2024-08-30 11:04:20.849][4c579d8c] PLUGIN[INFO]: Hook: filter.language
[2024-08-30 11:04:20.849][4c579d8c] PLUGIN[INFO]: Hook: filter.app-data
[2024-08-30 11:04:20.849][4c579d8c] [INFO]: Memory peak usage: 10MB
[2024-08-30 11:04:20.849][4c579d8c] [INFO]: Time delta: 0.051306962966919
[2024-08-30 11:04:20.974][2ec68363] [INFO]: [SM:2.37.3][IP:<IP>][PID:84184][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][POST http://cloud.example.com/apps/snappymail/?/Json/&q[]=/0/]
[2024-08-30 11:04:20.976][2ec68363] Nextcloud[DEBUG]: integrated
[2024-08-30 11:04:20.976][cd799374] [INFO]: [SM:2.37.3][IP:<IP>][PID:86857][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/?/Css/0/User/-/NextcloudV25+/-/1725015860906/Hash/-/Json/]
[2024-08-30 11:04:20.977][cd799374] Nextcloud[DEBUG]: integrated
[2024-08-30 11:04:20.979][2ec68363] JSON[INFO]: Action: DoFolders
[2024-08-30 11:04:20.979][2ec68363] POST[INFO]: {"Action":"Folders"}
[2024-08-30 11:04:20.980][2ec68363] IMAP[INFO]: Start connection to "tcp://mda-dovecot:14300"
[2024-08-30 11:04:20.980][cd799374] [INFO]: Memory peak usage: 8MB
[2024-08-30 11:04:20.980][cd799374] [INFO]: Time delta: 0.048131942749023
[2024-08-30 11:04:20.981][2ec68363] IMAP[INFO]: Connect (success)
[2024-08-30 11:04:20.981][2ec68363] IMAP[DEBUG]: 0.0014381408691406 (raw connection)
[2024-08-30 11:04:20.988][2ec68363] IMAP[INFO]: < * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.\r\n
[2024-08-30 11:04:20.988][2ec68363] IMAP[DEBUG]: 0.0086519718170166 (*)
[2024-08-30 11:04:20.988][2ec68363] PLUGIN[INFO]: Hook: imap.before-login
[2024-08-30 11:04:20.989][2ec68363] IMAP[INFO]: > TAG1 AUTHENTICATE PLAIN <snip>\r\n
[2024-08-30 11:04:21.005][2ec68363] IMAP[INFO]: < TAG1 OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE SNIPPET=FUZZY PREVIEW=FUZZY PREVIEW STATUS=SIZE SAVEDATE LITERAL+ NOTIFY SPECIAL-USE QUOTA ACL RIGHTS=texk] Logged in\r\n
[2024-08-30 11:04:21.005][2ec68363] IMAP[DEBUG]: 0.01649284362793 (TAG1)
[2024-08-30 11:04:21.006][2ec68363] IMAP[INFO]: > TAG2 LIST "" "*" RETURN (SUBSCRIBED SPECIAL-USE STATUS (MESSAGES UNSEEN UIDNEXT UIDVALIDITY HIGHESTMODSEQ))\r\n

[SoleroTG]

I tried the Login Override extension in v 2.3. This allows me to use a bogus password when the Snappymail login masks appears. It's a not-so-beautiful solution, but works for IMAP and SMTP.

Unfortunately, it doesn't work for logging in to the sieve server. I get an ERROR 902 and the log shows on level 4

[2024-08-29 14:59:31.500][35e2eb41] [ERROR]:  (NO "Authentication failed.")                                                                                                                                
/var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/RainLoop/Providers/Filters.php#24
#0 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/RainLoop/Providers/Filters.php(40): RainLoop\Providers\Filters::handleException(Object(MailSo\Sieve\Exceptions\LoginBadCredentialsException), 352)
#1 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/RainLoop/Actions/Filters.php(22): RainLoop\Providers\Filters->Load(Object(RainLoop\Model\MainAccount))
#2 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/RainLoop/ServiceActions.php(141): RainLoop\Actions->DoFilters()
#3 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/RainLoop/Service.php(132): RainLoop\ServiceActions->ServiceJson('')
#4 /var/www/html/custom_apps/snappymail/app/snappymail/v/2.37.3/app/libraries/RainLoop/Service.php(14): RainLoop\Service::RunResult()
#5 /var/www/html/custom_apps/snappymail/lib/Util/SnappyMailHelper.php(119): RainLoop\Service::Handle()
#6 /var/www/html/custom_apps/snappymail/lib/Controller/PageController.php(115): OCA\SnappyMail\Util\SnappyMailHelper::startApp(true)
#7 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(232): OCA\SnappyMail\Controller\PageController->indexPost()
#8 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(138): OC\AppFramework\Http\Dispatcher->executeController(Object(OCA\SnappyMail\Controller\PageController), 'indexPost')
#9 /var/www/html/lib/private/AppFramework/App.php(184): OC\AppFramework\Http\Dispatcher->dispatch(Object(OCA\SnappyMail\Controller\PageController), 'indexPost')
#10 /var/www/html/lib/private/Route/Router.php(338): OC\AppFramework\App::main('PageController', 'indexPost', Object(OC\AppFramework\DependencyInjection\DIContainer), Array)
#11 /var/www/html/lib/base.php(1053): OC\Route\Router->match('/apps/snappymai...')
#12 /var/www/html/index.php(49): OC::handleRequest()
#13 {main}

Obviously, this is because the Login Override extension does not override the sieve credentials.

I am out of ideas to make it work. I would love to use Snappymail, but need some help here.

Does anyone have an idea for the workaround or at best for the (perhaps) bug #1728
Anyone? @the-djmaze

[the-djmaze]

Actually there are several things.
Nextcloud Open ID Connect receives oidc auth and refresh tokens.
The auth token will be used by SnappyMail to login IMAP/SMTP/Sieve.

Does your IMAP server support oauthbearer and the correct authorize tokens?

[SoleroTG]

Actually it does as I use dovecot/postfix, but I haven't configured oidc for the both of these, yet. I found little documentation for dovecot/postfix and authelia.
Would it work in conjunction with credentials of additionally added accounts under the main account? E.g. a gmail account with app-specific-password as secondary email account under the main oidc-email-account?

Right now, I would prefer to set up - at least initially - a simple username/password login and try oidc later.

Is the ability for Snappymail within nextcloud to access saved credentials on the roadmap of the project at all or do I have to go with enabling oidc for dovecot/postfix anyway?

[SoleroTG]

I fail to setup OIDC with Snappymail as it misses the access_token.

Debug-log shows:

[2024-09-02 10:36:07.507][f83e125d] [INFO]: [SM:2.37.3][IP:<IP>][PID:303620][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/]
[2024-09-02 10:36:07.508][f83e125d] Nextcloud[DEBUG]: integrated
[2024-09-02 10:36:07.509][f83e125d] Nextcloud[DEBUG]: OIDC access_token missing
[2024-09-02 10:36:07.509][f83e125d] Nextcloud[DEBUG]: snappymail-autologin is off
[2024-09-02 10:36:07.509][f83e125d] PLUGIN[INFO]: Hook: filter.language
[2024-09-02 10:36:07.576][f83e125d] [INFO]: Memory peak usage: 10MB
[2024-09-02 10:36:07.576][f83e125d] [INFO]: Time delta: 0.12672996520996
[2024-09-02 10:36:07.720][d1429652] [INFO]: [SM:2.37.3][IP:<IP>][PID:87633][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/?/AppData/0/5873651309349038/]
[2024-09-02 10:36:07.721][d1429652] Nextcloud[DEBUG]: integrated
[2024-09-02 10:36:07.721][d1429652] Nextcloud[DEBUG]: OIDC access_token missing
[2024-09-02 10:36:07.721][d1429652] Nextcloud[DEBUG]: snappymail-autologin is off
[2024-09-02 10:36:07.722][d1429652] PLUGIN[INFO]: Hook: filter.language
[2024-09-02 10:36:07.722][d1429652] PLUGIN[INFO]: Hook: filter.app-data
[2024-09-02 10:36:07.722][d1429652] Nextcloud[DEBUG]: snappymail-autologin is off
[2024-09-02 10:36:07.722][d1429652] [INFO]: Memory peak usage: 8MB
[2024-09-02 10:36:07.722][d1429652] [INFO]: Time delta: 0.048014879226685
[2024-09-02 10:36:07.849][f5f76406] [INFO]: [SM:2.37.3][IP:<IP>][PID:87644][Apache/2.4.61 (Debian)][apache2handler][Streams:tcp,udp,unix,udg,ssl,tls,tlsv1.0,tlsv1.1,tlsv1.2,tlsv1.3][GET http://cloud.example.com/apps/snappymail/?/Css/0/User/-/NextcloudV25+/-/1725273367789/Hash/-/Json/]
[2024-09-02 10:36:07.849][f5f76406] Nextcloud[DEBUG]: integrated
[2024-09-02 10:36:07.850][f5f76406] Nextcloud[DEBUG]: OIDC access_token missing
[2024-09-02 10:36:07.850][f5f76406] Nextcloud[DEBUG]: snappymail-autologin is off
[2024-09-02 10:36:07.851][f5f76406] [INFO]: Memory peak usage: 8MB
[2024-09-02 10:36:07.851][f5f76406] [INFO]: Time delta: 0.043683052062988

cloud.example.com is the subdomain of nextcloud

I expect that Snappymail gets hold of the access_token of nextcloud. I did neither change the configuration of nextcloud nor my IdP. I just added the same secret nextcloud uses to dovecot's configuration, which is the only configuration I edited. Is this correct? I just found very few information about setting this up.
What am I missing here?