Re: [Imap-protocol] Seeking clarity on Gmail "Access for less secure apps" setting for non XOAuth2 access

On Wed, Sep 3, 2014 at 1:55 AM, Arnt Gulbrandsen <[email protected]>
wrote:

> On Tuesday, September 2, 2014 10:19:45 PM CEST, Andrew Sutherland wrote:
>
>> It appears Gmail may actually be doing this, which is great news!
>>
>
> WEBALERT is something gmail, and only gmail, does. I don't know what it
> means, but it does mean something other than the completely general ALERT.
> IMO WEBALERT is more usable from a client's point of view.
>
> What an unpleasant situation.


Its basically an ALERT which directs the client to a web page.  Although
we've had free-form URLs in the error messages for years, this mechanism
makes it easier to actually parse the URL out.  Its currently only used for
login errors related to our permission system, and was suggested by one of
our client partners.

Its assumed the client would redirect the user to that webpage, ie HTTP 302
style.  One can imagine it being similar to implementing OAUTHBEARER where
the cilent would need an embedded webview to perform the oauth
authentication.  It doesn't require an embedded webview like OAUTH, since
its not expected that the client needs to scrape information out of the
webview.

Brandon

_______________________________________________
Imap-protocol mailing list
[email protected]
http://mailman13.u.washington.edu/mailman/listinfo/imap-protocol