OAUTHBEARER SASL mechanism support

[tookko]

Given how ubiquitous OAuth 2 is with web applications, it would be great if projects relying on Cyrus-SASL would be able to authenticate users against OAuth 2 authorization servers. Are there any plans to extend Cyrus-SASL with OAUTHBEARER mechanism from RFC 7628?

[supercairos]

Is there any updates on this ?

[mcarbonneaux]

i found xoauth2 from google and used microsoft but no oauth2 (rfc 7628 writen by microsoft) https://github.com/tarickb/sasl-xoauth2 and https://github.com/moriyoshi/cyrus-sasl-xoauth2.

i found discutions about that in cyrus sasl mailing list: https://lists.andrew.cmu.edu/pipermail/cyrus-sasl/2018-May/003132.html

dovecot seem to support the two option: https://doc.dovecot.org/2.3/configuration_manual/authentication/authentication_mechanisms/#authentication-authentication-mechanisms