[JAMES-3351] JMAP authentication rework

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.6.0
• Assignee: Unassigned
• Reporter: Lan Khuat
• Created: 30/Jul/20 04:34
• Updated: 29/Sep/20 04:31
• Resolved: 11/Aug/20 09:40

Description

We mandate at least one authentication strategy to return a valid result. However, this means that if one authentication strategy is valid then others can be invalid, or both are valid but come from different identities.

To avoid this complication, if one of the authentication method is attenpted with wrong credentials the authentication will fail. We should not allow more than one set of credentials.

DOD:

• Rework authentication strategies.

• Write a JMAP-Draft and JMAP-RFC-8621 integration test, exercising several authentication strategies, and demonstrating that if any of them fails, then the request is rejected.