interimap --debug || true

# double check the presence of 'LOGINDISABLED' and 'STARTTLS' in the preauth capability list
grep -oE -m1 '^remote: S: \* OK \[CAPABILITY IMAP4rev1( [^]]*)? AUTH=[^]]*\]' <"$STDERR" >"$TMPDIR/capability"

sed -ri 's/^remote: S: \* OK \[CAPABILITY (.*)\]$/\1/' "$TMPDIR/capability"
tr " " "\\n" <"$TMPDIR/capability" >"$TMPDIR/capabilities"
grep -Fx "IMAP4rev1"     <"$TMPDIR/capabilities" || error
grep -Fx "LOGINDISABLED" <"$TMPDIR/capabilities" || error

# make sure we upgraded the connection and check the capability again
grep -Fx "STARTTLS" <"$TMPDIR/capabilities"        || error
grep -Fx "remote: C: 000000 STARTTLS"   <"$STDERR" || error
grep -Fx "remote: C: 000001 CAPABILITY" <"$STDERR" || error

# can't go further as the capability string still has the manually
# enforced 'LOGINDISABLED'

# vim: set filetype=sh :