Upgrade base image to Debian 11

[srt]

I would love to see the base image upgraded to Debian 11 so we get an up to date version of Dovecot. Recent versions of Dovecot have better support for XOAUTH2 that should help implementing SSO with webmail clients like Roundcube and OIDC providers like Keycloak.

[georglauterbach]

#2116 will be merged approximately next week. We wait because there may be some bug reports that come from releasing v10.3.0 recently. We do not want the update to Debian 11 to interfere here.

You will then be able to use the :edge tag to use Debian 11 until v11 is released. Please note that :edge may not be as stable as a release.

[polarathene]

Debian 11 so we get an up to date version of Dovecot. Recent versions of Dovecot have better support for XOAUTH2

From that link it states: "New in version v2.3.16." (for OpenID Discovery)

Debian 11 ships Dovecot 2.3.13 which will enable support for features "Proxy with Password Grant" and "Local Validation". Is it one of those? Or did you want the OpenID Discovery? (it seems like it'd be useful for Keycloak, but too new unfortunately)

---

As stated, I'm waiting on hearing back that changes in two active issues were resolved with v10.3.0 release, then we'll update the image for edge tag. I'm a bit pressed for time this month, and would like to get some changes in for v11, thus I am not sure if we'll see that as a tagged release until some time in Jan.

[srt]

Thanks for having a look at this and pointing me to the merge request. I will try out the new version as soon as a docker image becomes available.
The most important feature ist "Local validation" (New in version 2.3.11) which allows dovecot to validate the token without an additional round trip to the idp. OpenID Discovery would be nice too, as it would make configuration much easier, but it is not as crucial as local validation.

[vx3r]

hello @srt im also trying to setup oidc for docker-mailserver using authelia as idp, can you please elaborate you config ? Which mail client are you using ? Im struggling to understand how dovecot is getting the oauth token or client credentials from email client to validate them against idp.
thanks for you help