Stop sending OAuth2 managed fields back on provider save

src/api/generated/data-contracts.ts

@@ -6033,12 +6033,12 @@ export interface SmtpImapOauth2Config {
   clientId: string;
   /** OAuth2 client secret */
   clientSecret: string;
-  /** OAuth2 refresh token (long-lived) */
-  refreshToken: string;
-  /** Current OAuth2 access token (rotated by the refresh service) */
-  accessToken: string;
-  /** Unix timestamp in milliseconds when the access token expires */
-  accessTokenExpiry: number;
+  /** OAuth2 refresh token (long-lived, managed by the OAuth2 callback/refresh service) */
+  refreshToken?: string;
+  /** Current OAuth2 access token (managed by the OAuth2 callback/refresh service) */
+  accessToken?: string;
+  /** Unix timestamp in milliseconds when the access token expires (managed by the OAuth2 callback/refresh service) */
+  accessTokenExpiry?: number;
   /** OAuth2 scope string (e.g. https://www.googleapis.com/auth/gmail.modify for Gmail) */
   scope: string;
 }

src/api/openapi.json

@@ -12903,15 +12903,15 @@
           },
           "refreshToken": {
             "type": "string",
-            "description": "OAuth2 refresh token (long-lived)"
+            "description": "OAuth2 refresh token (long-lived, managed by the OAuth2 callback/refresh service)"
           },
           "accessToken": {
             "type": "string",
-            "description": "Current OAuth2 access token (rotated by the refresh service)"
+            "description": "Current OAuth2 access token (managed by the OAuth2 callback/refresh service)"
           },
           "accessTokenExpiry": {
             "type": "integer",
-            "description": "Unix timestamp in milliseconds when the access token expires"
+            "description": "Unix timestamp in milliseconds when the access token expires (managed by the OAuth2 callback/refresh service)"
           },
           "scope": {
             "type": "string",
@@ -12922,9 +12922,6 @@
           "tokenUrl",
           "clientId",
           "clientSecret",
-          "refreshToken",
-          "accessToken",
-          "accessTokenExpiry",
           "scope"
         ],
         "additionalProperties": false,

src/views/administration/provider-configuration/providerRegistry.ts

@@ -329,9 +329,6 @@ const registry: Record<string, ProviderEntry> = {
           clientSecret: c.oauth2ClientSecret,
           scope: c.oauth2Scope,
         }
-        if (c.oauth2AccessTokenExpiry) {
-          oauth2.accessTokenExpiry = parseInt(c.oauth2AccessTokenExpiry, 10)
-        }
         cfg.oauth2 = oauth2
       }