Multiple passwords per account?

[blacs30]

Sorry if this appear double, I think GH had some issues today, saw many 500s.

In postfix dovecot I have a app password/token style authentication in sql.

That's my query:

password_query = SELECT NULL AS password,'Y' as nopassword, username AS user, allow_nets \
                FROM dovecot_passwords \
                                WHERE username = '%u' AND password=MD5(REPLACE('%w',' ','')) AND enabled=1

That's the table schema:

CREATE TABLE IF NOT EXISTS dovecot_passwords (username varchar(100) NOT NULL,appname varchar(50) NOT NULL, password varbinary(256) NOT NULL, allow_nets varchar(100), enabled int,  PRIMARY KEY (username,appname) );"

It also uses the allow_nets dovecot feature. This allows me to lock down app passwords per ip e.g. for servers and have also more access usage for mobile devices. In case a password would get hacked/exposed I wouldn't need to change it on every device and could quickly disable that password.

Is something similar possible already with the mail-server?
The app password style would be probably doable by a schema and query change but what about the allow_nets feature?

[blacs30]

I think the Lookup Lists might be enough for me. Slightly different than currently but that's okay.
https://stalw.art/docs/configuration/overview/rules/comparators#lookup-lists