mirror of
https://github.com/mailcow/mailcow-dockerized.git
synced 2026-11-10 18:41:01 +00:00
Outlook for iOS/Android connects through Microsoft's sync service, which sends each EAS command without credentials first and only retries with Basic auth after a 401 + WWW-Authenticate challenge. SOGo answers these unauthenticated POSTs (Provision, FolderSync, Sync, ...) with 403, so the Outlook apps never get past Provision and show an empty mailbox (#5846). Answer requests without an Authorization header with a Basic challenge in nginx before they reach SOGo. Clients that send credentials up front are not affected.