Yes, in order to use oauth for mail scopes, you need a token by registering with the Google API console.
That token can be used by a limited number of users (who will go through a scarey interstitial) unless your app passes the security approval process. It's currently limited to 100 users. Mail apps are definitely allowed to exist, and may or may not require a vendor security audit. if they do require an audit, ugh, that's expensive and annoying. Often (but not always), audits are only required for services, installable code with no centralized service are usually exempt, but you still need to carefully file the request, often with a "video" of usage of the app. I can see how that might be complicated for things like fetchmail, automated tools without much to look at. That said, every user can just get their own token for themselves, high barrier but not insurmountable. Also, iirc, GSuite Admins can whitelist tokens for their own use outside of the approval flow, ie if a company develops an internal app to access their own users mailboxes, they don't need to go through the approval flow. FAQ here: https://support.google.com/cloud/answer/9110914 Brandon On Tue, Dec 17, 2019 at 1:56 AM Andris Reinman via mailop <[email protected]> wrote: > It is not that you could just somehow easily add OAuth support to things. > To get valid client ids for the OAuth to work you have to go through > excessive verification process first as IMAP scope is something that Gmail > considers restricted. > > Regards, > Andris > > > On 17. Dec 2019, at 11:40, Philip Paeps via mailop <[email protected]> > wrote: > > > > On 2019-12-17 03:20:04 (+0800), Al Iverson via mailop wrote: > >> Google is announcing that in the future, G-Suite accounts will not > support LSA (Less Secure Access) account connection functionality. This > will put an end to accessing your Gmail account via POP3 or old school > IMAP, unless your email client supports OAuth. > > > > So someone will have to implement OATH support in fetchmail or I will > lose access to customer email addresses on G-Suite. > > > > (Sure, I could fetch the email using Mailmate but 1. I don't want Google > to follow my laptop around the world - that's creepy - and 2. I have my > mailserver fetch my mail so it's more easily backed up.) > > > >> 2. February 15, 2021 - Access to LSAs will be turned off for all G > Suite accounts. > > > > Clear deadline at least. > > > >> This isn't a bad thing, of course. > > > > I'm not sure I share that particular view... > > > > Philip > > > > -- > > Philip Paeps > > Senior Reality Engineer > > Alternative Enterprises > > > > _______________________________________________ > > mailop mailing list > > [email protected] > > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop > > _______________________________________________ > mailop mailing list > [email protected] > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop >
_______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
