Make Logout from All clear IMAP session tokens

[michaelpope]

Hey there,

This is going to sound like a little bit of a weird request.

Under your profile, you have the capability to Logout from All tokens for your account. However, this doesn't clear your current IMAP session tokens. Can you make that button also clear the IMAP session tokens (just so I don't have to go to the command line).

The command should (I think) be docker exec mail doveadm kick person@emailaddress.com.

The reason I would like this if possible is because Outlook currently proxies all emails through Microsoft's servers, and it holds on to the IMAP session token for quite a while. And not many folks would know (I think) that they need to go ahead and issue that particular command after they reset a password in the case of a compromise.

(Also, if you could do the same thing with Sogo session tokens, that would be cool too... but that might be extra work you don't need to do, and also... there's no easy way to clear sessions for a specific user. There's only sogo-tool -v expire-sessions 0 ).

Edit: Sorry, I just realized this request might be harder than I stated. Due to email inbox ownership, you'd probably need to issue docker exec mail doveadm kick person@emailaddress.com to each mailbox they own or things owned by groups they are a part of. That's a whole lot more complicated.