oauthProvider API
The oauthProvider API allows to manage OAuth authentication providers for Thunderbird to use when connecting to mail/address book/calendar services.
Manifest file properties
oauth_provider
Describes an OAuth authentication provider for Thunderbird. You will need to have a client ID registered with the provider to use this API.
authorizationEndpoint
OAuth authorization endpoint address.
clientId
Identifies the OAuth client to the server.
hostnames
One or more server hostnames that use this OAuth provider. Include any service or autodiscovery hostnames that may initiate OAuth authentication. For example, to override many Microsoft configurations, both of these would be needed - [“office365.com”, “outlook.com”]
issuer
A string to identify this provider in the login manager. This should match the hostname of the authorization endpoint, although that is not required.
redirectionEndpoint
OAuth redirection endpoint.
scopes
The scopes to request when using this OAuth provider.
tokenEndpoint
OAuth token endpoint address.
clientSecret
Identifies the OAuth client to the server.
emailDomains
Email domains for which this OAuth provider should be used. If omitted, the provider applies to all domains in use with a given hostname
issuerIdentifier
The OAuth authorization server issuer identifier, as defined by RFC 9207. If provided, it must be an exact string match to what the provider gives in the iss field.
useExternalBrowser
If the login flow should use the system web browser. If true, the redirectionEndpoint must be a loopback address, so an origin of http://127.0.0.1 or http://localhost.
usePKCE
If the authorization uses PKCE.