From 6bccdd62cec3ce20f50da12c8b4a23678746aea5 Mon Sep 17 00:00:00 2001 From: Simon Ser Date: Tue, 17 Dec 2019 15:55:52 +0100 Subject: [PATCH] Document that plugins don't have access to passwords --- session.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/session.go b/session.go index aacaf6c..e753d84 100644 --- a/session.go +++ b/session.go @@ -37,6 +37,9 @@ func (err AuthError) Error() string { } // Session is an active user session. It may also hold an IMAP connection. +// +// The session's password is not available to plugins. Plugins should use the +// session helpers to authenticate outgoing connections, for instance DoSMTP. type Session struct { manager *SessionManager username, password string