Youssuf ElKalay

As an aside I'm not suggesting we bolt an OAuth2 provider to GreenMail. We should accept OAuth2 tokens and delegate them to a user configured OAuth2 service.

This Github project might be handy in developing this feature - https://github.com/OAuth-Apis/apis

The Google page on XOAUTH2 has some solid notes on implementing it with [IMAP](https://developers.google.com/gmail/xoauth2_protocol#imap_protocol_exchange) and [SMTP](https://developers.google.com/gmail/xoauth2_protocol#smtp_protocol_exchange)

@marcelmay in hindsight we probably shouldn't have enabled this by default. Now users will need to enable auth for SMTP but it's enabled for IMAP/POP3 by default. There's some cognitive...

@camann9 so what we're saying is that out of box users will NOT have to authenticate against SMTP/IMAP/POP3 - and that a flag or configuration param will be required to...

Right so therein lies my point - today as it stands authentication is **NOT** required for SMTP. It is required for IMAP/POP3. If we go with a default of auth...

@EarthCitizen Until this issue is resolved authentication against SMTP services is currently not required. The setAuthRequired() call on UserManager only applies to IMAP and POP3.

Additionally I'm not really sure how your test suite would benefit from having assertion on a password. Yes I agree that not having SMTP authentication is an issue but you...

@EarthCitizen Ok so there seems to be some confusion here - when you open a connection to the GreenMail SMTP server it's still going to authenticate - but it will...

@EarthCitizen It looks like I was mistaken - the GreenMail SMTP service does _not_ support the AUTH command as shown here in the [SMTPCommandRegistry](https://github.com/greenmail-mail-test/greenmail/blob/master/greenmail-core/src/main/java/com/icegreen/greenmail/smtp/commands/SmtpCommandRegistry.java) class We'll need to implement AUTH...