App passwords are not possible

[individual-it]

no public API for app passwords (that is also true for oC10) so app-passwords cannot be generated

[DeepDiver1975]

to be discussed/concept - ocis is based on OpenId Connect - app passwords do not exists.
Any client talking to OCIS needs to follow the OpenID Connect flows.

[butonic]

reva does support an authentication chain, including Basic auth and Bearer auth. Basic auth uses the ldap server to authenticate requests.

since reva internally uses custom JWT tokens I would rocommend to implement this in a dedicated service that is capable of minting those tokens.

[DeepDiver1975]

^ and some frontend component to allow each and every user to create such a token for themselves.

Question is up to prio ....

[refs]

closing in favor of #197