API for Token based SOGo Login

[xLixon]

Summary

Hey Guys,
Im in the developing stage of an own Panel for my Users. I am relying on some functions of the Mailcow API to fetch Data like aviable quota, alias adresses, ... ... ...
But one function im missing, is the ability to a passwordless Login in SOGo.
And i know the function is in mailcow because as an user as well as an admin you can login in mailboxes directly from mailcow.
So why dont make it aviable for own purposes?

It could be that the Application sends an API Call to the endpoint with the same, or an extra api key in the auth header and in the post body the application can specify wich mailbox should be opened. As a response, we get a token. This token can we put then in the GET of the user and redirect him.
(f.e.: https://mail.example.de/sogo-auth-api.php?login=THE-GENERATED-TOKEN)
The token is linked to the email adress supplied in the post request and can only be used for this login.

I tried to implement it on my own in the sogo-auth.php file (/data/web/sogo-auth.php), but i didnt get it to work because i didnt quiet understood the logic behind this SSO login but i will keep searching to maybe make an working version for this.

Motivation

To Login from an Own panel without the need of entering a password

Additional context

No response

[xLixon]

Hey @DerLinkman, wieso ist das denn kein feature?

[DerLinkman]

English please...

Sorry misread your text... to busy lately...

[xLixon]

Ahh okey sorry, no problem
So it is a feature right?

[DerLinkman]

A feature request, yes

[xLixon]

perfect, thanks for reopening

[xLixon]

Checkout #6070

[lulzkiller666]

We created a complete WHMCS module for mailcow. The only thing we need now is SSO login on the clientside so the client can login directly to their mailbox. Preferbly without using the API key. But doing it the proper way....