On Thu, 12 Mar 2026, Steffen Nurpmeso steffen-at-sdaoden.eu |s-nail| wrote:
Hello Stephen! Stephen Isard wrote in <[email protected]>: |When you asked earlier whether I was getting refresh tokens, I said I |hadn't checked. Now I have, and I am not getting them. I found a zoho |faq page about it (can't find it again, their website is impossible to |navigate) saying that I needed access_type=offline, so I tried that, but Yes, that was https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.zoho.com%2Faccounts%2Fprotocol%2Foauth%2Fweb-apps%2Fauthorization.html&data=05%7C02%7C%7C4744bb092a6640dc271808de8090bf6f%7C2e9f06b016694589878910a06934dc61%7C0%7C0%7C639089556514938289%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=P0XHZKp22LjllFY87C0OFNRcKAs6PlBaz3Yba%2FsZ724%3D&reserved=0 but it said it is optional. It says If the value is offline, a refresh token will also be provided for the first time the app requests for an access token, which the app can store and then use to refresh the access token whenever required. However, i thought, you know, we actually start off with an "Auth 2.0 RFC 6749, 4.1.1. Authorization Request", and then we have the refresh token from that (i thought). |it didn't make any difference. So that's a problem. Where did you include it? In the "Zoho" entry of "providers"?
I edited it into the resource file template together with client id, etc.
...
|I also tried logging in and then immediately doing "account zoho" with |debug set to see whether it would tell me why I wasn't getting access to |the Inbox. At the end I got | |s-nail: >>> SERVER: * OK svwall.zoho.com IMAP4 Server (Zoho Mail |IMAP4rev1 Server version 1.0) |s-nail: >>> T3 CAPABILITY |s-nail: >>> SERVER: * CAPABILITY IMAP4rev1 UNSELECT CHILDREN XLIST |NAMESPACE IDLE MOVE ID AUTH=PLAIN SASL-IR XOAUTH2 UIDPLUS ESEARCH |LIST-EXTENDED LIST-STATUS WITHIN LITERAL- ACL CONDSTORE ^ this announcement is bogus. Have you edited it?
No. copied and pasted directly from the s-nail window into the message.
|s-nail: >>> SERVER: T3 OK CAPABILITY completed |s-nail: >>> T4 AUTHENTICATE XOAUTH2 ^ you included your credentials here.
Not reported by the debug code.
|s-nail: >>> SERVER: T4 BAD [CLIENTBUG] syntax: Invalid sasl Argument | |Does that tell you anything useful? Not really, unless this refers to a bad password. Which it likely is if you have no access_token.
I do have an access token. Echoing $password gives the same string as the access token in the resource file.
Stephen Isard
