Re: Gmail/OAuth2
Trevor <[email protected]> Fri, 2 May 2025 09:46:10 -0600
| Newsgroups | gmane.mail.mahogany.user |
|---|---|
| Message-ID | <CAPhwtc9mCaRTq8yURR9Hz5pdL250nvWeTDfwDsaUHwNiX1rzGQ@mail.gmail.com> |
--===============2940517136550760123== Content-Type: multipart/alternative; boundary="000000000000170c720634290da4" --000000000000170c720634290da4 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks, Vadim, for the reply! No worries on not spending much time on Mahogany, it's been nice having stable software that just does its job, doesn't try to be everything else, and just works (all things increasingly becoming rare). I'm not one for most modern UI (I still have Windows looking like XP!) so overall, M is very comfortable for me. Unfortunately my email is a Workspace Account, administered by my ISP, and it took me a while to find this: "Starting January 2025, less secure apps, third-party apps, or devices that have you sign in with only your username and password will no longer be supported for Google Workspace accounts. For exact dates, visit Google Workspace Updates. To continue to use a specific app with your Google Account, you=E2=80=99ll need to use a more secure type of access that doesn= =E2=80=99t share password data." https://support.google.com/accounts/answer/6010255?sjid=3D13268217095278805= 801-NC and "[Update - April 29, 2025]: Less Secure Apps will no longer be supported as of May 1, 2025." "As part of our commitment to user safety, Google Workspace will no longer support the sign-in method for third-party apps or devices that require users to share their Google username and password. This antiquated sign-in method, known as Less Secure Apps (LSAs), puts users at an additional risk since it requires sharing Google Account credentials with third-party apps and devices that can make it easier for bad actors to gain unauthorized access to your account." "Beginning September 30, 2024: Access to LSAs will be turned off for all Google Workspace accounts. CalDAV, CardDAV, IMAP, POP and Google Sync will no longer work when signing in with just a password =E2=80=94 you will need= to login with a more secure type of access called OAuth." https://workspaceupdates.googleblog.com/2023/09/winding-down-google-sync-an= d-less-secure-apps-support.html I had known this was coming (they were originally announced this in 2019) but it looks like it finally caught up with me. Back in 2020 I even downloaded the M source and figured out how to build it, with the intent of looking at adding OAuth support -- but, life intervened and I never went back to it. Maybe one day? You having found the lib with Alpine is hopeful! But, no worries, I know what you mean about it requiring some work and not having an abudance of time. I'll keep an eye on the github, though. Mostly, though, as I'm looking around at alternative email clients, I'm just pleased you're still using (and tweaking) M! Cheers, and good luck! Trevor On Thu, May 1, 2025 at 7:35=E2=80=AFAM Vadim Zeitlin <vz-mahogany@zeitlins.= org> wrote: > On Thu, 1 May 2025 00:34:17 -0600 Trevor <[email protected]> wrote: > > T> Hi! I'm still using Mahogany after all these years (since about 2004). > > Hi, > > Glad to hear that there are still some users of Mahogany left! > > T> It's been a few years since I checked the website and mailing lists an= d > T> it's great to see there's been some recent activity. > > I have to admit that I didn't do any serious work on Mahogany since year= s, > if not decades, but I do fix things that bother me personally from time t= o > time, as I still use it for handling all my email. > > T> I've been using it for Gmail, via both POP3 and IMAP for various > accounts. > T> However, Gmail has finally dropped support for legacy applications tha= t > use > T> only Username/Password credentials, > > It doesn't look like they already did: > > $ openssl s_client -crlf -connect imap.gmail.com:993 > [...] > * OK Gimap ready for requests from xxx.yyy.zzz.www g9mb50557697wmk > c01 capability > * CAPABILITY IMAP4rev1 UNSELECT IDLE NAMESPACE QUOTA ID XLIST CHILDREN > X-GM-EXT-1 XYZZY SASL-IR AUTH=3DXOAUTH2 AUTH=3DPLAIN AUTH=3DPLAIN-CLIENTT= OKEN > AUTH=3DOAUTHBEARER > c01 OK Thats all she wrote! g9mb50557697wmk > c02 logout > * BYE Logout Requested g9mb50557697wmk > c02 OK Quoth the raven, nevermore... g9mb50557697wmk > > Note the presence of AUTH=3DPLAIN, so at least right now it should still = be > possible to use Mahogany with GMail. > > T> and it looks like I have to move to one that supports Oath2. As I also > T> plan to move from Windows to Linux, Mahogany still fits the bill. Any > T> plans on adding Oath2 to Mahogany? (or is it already there somewhere?) > > No, unfortunately not. Mahogany uses c-client library for dealing with a= ll > this stuff, which means that implementing this would need to be done at > that level, which is more difficult for me than just modifying Mahogany > itself. But OTOH it's not the only application using this library and it > looks like Alpine (the successor to Pine) has already implemented it, see > https://repo.or.cz/alpine.git/blob/HEAD:/imap/src/c-client/oauth2_aux.c > and > so perhaps we could just use their version. > > IOW this is not completely hopeless, but definitely requires some work. = I > might have a look at this, but no promises. For now I've created > https://github.com/vadz/mahogany/issues/1 which you can monitor if you'd > like to know when/if anything happens there. > > Best regards, > VZ > _______________________________________________ > Mahogany-Users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/mahogany-users On Thu, May 1, 2025 at 7:35=E2=80=AFAM Vadim Zeitlin <vz-mahogany@zeitlins.= org> wrote: > On Thu, 1 May 2025 00:34:17 -0600 Trevor <[email protected]> wrote: > > T> Hi! I'm still using Mahogany after all these years (since about 2004). > > Hi, > > Glad to hear that there are still some users of Mahogany left! > > T> It's been a few years since I checked the website and mailing lists an= d > T> it's great to see there's been some recent activity. > > I have to admit that I didn't do any serious work on Mahogany since year= s, > if not decades, but I do fix things that bother me personally from time t= o > time, as I still use it for handling all my email. > > T> I've been using it for Gmail, via both POP3 and IMAP for various > accounts. > T> However, Gmail has finally dropped support for legacy applications tha= t > use > T> only Username/Password credentials, > > It doesn't look like they already did: > > $ openssl s_client -crlf -connect imap.gmail.com:993 > [...] > * OK Gimap ready for requests from xxx.yyy.zzz.www g9mb50557697wmk > c01 capability > * CAPABILITY IMAP4rev1 UNSELECT IDLE NAMESPACE QUOTA ID XLIST CHILDREN > X-GM-EXT-1 XYZZY SASL-IR AUTH=3DXOAUTH2 AUTH=3DPLAIN AUTH=3DPLAIN-CLIENTT= OKEN > AUTH=3DOAUTHBEARER > c01 OK Thats all she wrote! g9mb50557697wmk > c02 logout > * BYE Logout Requested g9mb50557697wmk > c02 OK Quoth the raven, nevermore... g9mb50557697wmk > > Note the presence of AUTH=3DPLAIN, so at least right now it should still = be > possible to use Mahogany with GMail. > > T> and it looks like I have to move to one that supports Oath2. As I also > T> plan to move from Windows to Linux, Mahogany still fits the bill. Any > T> plans on adding Oath2 to Mahogany? (or is it already there somewhere?) > > No, unfortunately not. Mahogany uses c-client library for dealing with a= ll > this stuff, which means that implementing this would need to be done at > that level, which is more difficult for me than just modifying Mahogany > itself. But OTOH it's not the only application using this library and it > looks like Alpine (the successor to Pine) has already implemented it, see > https://repo.or.cz/alpine.git/blob/HEAD:/imap/src/c-client/oauth2_aux.c > and > so perhaps we could just use their version. > > IOW this is not completely hopeless, but definitely requires some work. = I > might have a look at this, but no promises. For now I've created > https://github.com/vadz/mahogany/issues/1 which you can monitor if you'd > like to know when/if anything happens there. > > Best regards, > VZ > _______________________________________________ > Mahogany-Users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/mahogany-users > --000000000000170c720634290da4 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div dir=3D"ltr">Thanks,=C2=A0Vadim, for the reply!<div><b= r></div><div>No worries on not spending much time on Mahogany, it's bee= n nice having stable software that just does its job, doesn't try to be= everything else, and just works (all things increasingly becoming rare). I= 'm not one for most modern UI (I still have Windows looking like XP!) s= o overall, M is very comfortable for me.</div><div><br></div>Unfortunately = my email is a Workspace Account, administered by my ISP, and it took me a w= hile to find this:<div>"Starting January 2025, less secure apps, third= -party apps, or devices that have you sign in with only your username and p= assword will no longer be supported for Google Workspace accounts. For exac= t dates, visit Google Workspace Updates. To continue to use a specific app = with your Google Account, you=E2=80=99ll need to use a more secure type of = access that doesn=E2=80=99t share password data."</div><div><br></div>= <div><a href=3D"https://support.google.com/accounts/answer/6010255?sjid=3D1= 3268217095278805801-NC">https://support.google.com/accounts/answer/6010255?= sjid=3D13268217095278805801-NC</a></div><div><br></div><div>and</div><div><= br>"[Update - April 29, 2025]: Less Secure Apps will no longer be supp= orted as of May 1, 2025."</div><div><br></div><div>"As part of ou= r commitment to user safety, Google Workspace will no longer support the si= gn-in method for third-party apps or devices that require users to share th= eir Google username and password. This antiquated sign-in method, known as = Less Secure Apps (LSAs), puts users at an additional risk since it requires= sharing Google Account credentials with third-party apps and devices that = can make it easier for bad actors to gain unauthorized access to your accou= nt."</div><div><br></div><div>"Beginning September 30, 2024: Acce= ss to LSAs will be turned off for all Google Workspace accounts. CalDAV, Ca= rdDAV, IMAP, POP and Google Sync will no longer work when signing in with j= ust a password =E2=80=94 you will need to login with a more secure type of = access called OAuth."</div></div><div dir=3D"ltr"><br><div><a href=3D"= https://workspaceupdates.googleblog.com/2023/09/winding-down-google-sync-an= d-less-secure-apps-support.html">https://workspaceupdates.googleblog.com/20= 23/09/winding-down-google-sync-and-less-secure-apps-support.html</a></div><= div><br></div><div>I had known this was coming (they were originally announ= ced this in 2019) but it looks like it finally caught up with me. Back in 2= 020 I even downloaded the M source and figured out how to build it, with th= e intent of looking at adding OAuth support -- but, life intervened and I n= ever went back to it. Maybe one day? You having found the lib with=C2=A0Alp= ine is hopeful! But, no worries, I know what you mean about it requiring so= me work and not having an abudance of time. I'll keep an eye on the git= hub, though.=C2=A0</div><div><br></div><div>Mostly, though, as I'm look= ing around at alternative email clients, I'm just pleased you're st= ill using (and tweaking) M!</div><div><br></div><div>Cheers, and good luck!= </div><div>Trevor</div><div><br></div></div><div class=3D"gmail_quote gmail= _quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, May 1, 2025= at 7:35=E2=80=AFAM Vadim Zeitlin <<a href=3D"mailto:vz-mahogany@zeitlin= s.org">[email protected]</a>> wrote:<br></div><blockquote class= =3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg= b(204,204,204);padding-left:1ex">On Thu, 1 May 2025 00:34:17 -0600 Trevor &= lt;<a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]= et</a>> wrote:<br><br>T> Hi! I'm still using Mahogany after all t= hese years (since about 2004).<br><br>=C2=A0Hi,<br><br>=C2=A0Glad to hear t= hat there are still some users of Mahogany left!<br><br>T> It's been= a few years since I checked the website and mailing lists and<br>T> it&= #39;s great to see there's been some recent activity.<br><br>=C2=A0I ha= ve to admit that I didn't do any serious work on Mahogany since years,<= br>if not decades, but I do fix things that bother me personally from time = to<br>time, as I still use it for handling all my email.<br><br>T> I'= ;ve been using it for Gmail, via both POP3 and IMAP for various accounts.<b= r>T> However, Gmail has finally dropped support for legacy applications = that use<br>T> only Username/Password credentials,<br><br>=C2=A0It doesn= 't look like they already did:<br><br>$ openssl s_client -crlf -connect= =C2=A0<a href=3D"http://imap.gmail.com:993/" rel=3D"noreferrer" target=3D"_= blank">imap.gmail.com:993</a><br>[...]<br>* OK Gimap ready for requests fro= m xxx.yyy.zzz.www g9mb50557697wmk<br>c01 capability<br>* CAPABILITY IMAP4re= v1 UNSELECT IDLE NAMESPACE QUOTA ID XLIST CHILDREN X-GM-EXT-1 XYZZY SASL-IR= AUTH=3DXOAUTH2 AUTH=3DPLAIN AUTH=3DPLAIN-CLIENTTOKEN AUTH=3DOAUTHBEARER<br= >c01 OK Thats all she wrote! g9mb50557697wmk<br>c02 logout<br>* BYE Logout = Requested g9mb50557697wmk<br>c02 OK Quoth the raven, nevermore... g9mb50557= 697wmk<br><br>Note the presence of AUTH=3DPLAIN, so at least right now it s= hould still be<br>possible to use Mahogany with GMail.<br><br>T> and it = looks like I have to move to one that supports Oath2. As I also<br>T> pl= an to move from Windows to Linux, Mahogany still fits the bill. Any<br>T>= ; plans on adding Oath2 to Mahogany? (or is it already there somewhere?)<br= ><br>=C2=A0No, unfortunately not. Mahogany uses c-client library for dealin= g with all<br>this stuff, which means that implementing this would need to = be done at<br>that level, which is more difficult for me than just modifyin= g Mahogany<br>itself. But OTOH it's not the only application using this= library and it<br>looks like Alpine (the successor to Pine) has already im= plemented it, see<br><a href=3D"https://repo.or.cz/alpine.git/blob/HEAD:/im= ap/src/c-client/oauth2_aux.c" rel=3D"noreferrer" target=3D"_blank">https://= repo.or.cz/alpine.git/blob/HEAD:/imap/src/c-client/oauth2_aux.c</a>=C2=A0an= d<br>so perhaps we could just use their version.<br><br>=C2=A0IOW this is n= ot completely hopeless, but definitely requires some work. I<br>might have = a look at this, but no promises. For now I've created=C2=A0<a href=3D"h= ttps://github.com/vadz/mahogany/issues/1" rel=3D"noreferrer" target=3D"_bla= nk">https://github.com/vadz/mahogany/issues/1</a>=C2=A0which you can monito= r if you'd like to know when/if anything happens there.<br><br>=C2=A0Be= st regards,<br>VZ<br>_______________________________________________<br>Mah= ogany-Users mailing list<br><a href=3D"mailto:[email protected]= rge.net" target=3D"_blank">[email protected]</a><br><a h= ref=3D"https://lists.sourceforge.net/lists/listinfo/mahogany-users" rel=3D"= noreferrer" target=3D"_blank">https://lists.sourceforge.net/lists/listinfo/= mahogany-users</a></blockquote></div></div><br><div class=3D"gmail_quote gm= ail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, May 1, 2= 025 at 7:35=E2=80=AFAM Vadim Zeitlin <<a href=3D"mailto:vz-mahogany@zeit= lins.org">[email protected]</a>> wrote:<br></div><blockquote clas= s=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid r= gb(204,204,204);padding-left:1ex">On Thu, 1 May 2025 00:34:17 -0600 Trevor = <<a href=3D"mailto:[email protected]" target=3D"_blank">tr.forum@telus.= net</a>> wrote:<br> <br> T> Hi! I'm still using Mahogany after all these years (since about 2= 004).<br> <br> =C2=A0Hi,<br> <br> =C2=A0Glad to hear that there are still some users of Mahogany left!<br> <br> T> It's been a few years since I checked the website and mailing lis= ts and<br> T> it's great to see there's been some recent activity.<br> <br> =C2=A0I have to admit that I didn't do any serious work on Mahogany sin= ce years,<br> if not decades, but I do fix things that bother me personally from time to<= br> time, as I still use it for handling all my email.<br> <br> T> I've been using it for Gmail, via both POP3 and IMAP for various = accounts.<br> T> However, Gmail has finally dropped support for legacy applications th= at use<br> T> only Username/Password credentials,<br> <br> =C2=A0It doesn't look like they already did:<br> <br> $ openssl s_client -crlf -connect <a href=3D"http://imap.gmail.com:993" rel= =3D"noreferrer" target=3D"_blank">imap.gmail.com:993</a><br> [...]<br> * OK Gimap ready for requests from xxx.yyy.zzz.www g9mb50557697wmk<br> c01 capability<br> * CAPABILITY IMAP4rev1 UNSELECT IDLE NAMESPACE QUOTA ID XLIST CHILDREN X-GM= -EXT-1 XYZZY SASL-IR AUTH=3DXOAUTH2 AUTH=3DPLAIN AUTH=3DPLAIN-CLIENTTOKEN A= UTH=3DOAUTHBEARER<br> c01 OK Thats all she wrote! g9mb50557697wmk<br> c02 logout<br> * BYE Logout Requested g9mb50557697wmk<br> c02 OK Quoth the raven, nevermore... g9mb50557697wmk<br> <br> Note the presence of AUTH=3DPLAIN, so at least right now it should still be= <br> possible to use Mahogany with GMail.<br> <br> T> and it looks like I have to move to one that supports Oath2. As I als= o<br> T> plan to move from Windows to Linux, Mahogany still fits the bill. Any= <br> T> plans on adding Oath2 to Mahogany? (or is it already there somewhere?= )<br> <br> =C2=A0No, unfortunately not. Mahogany uses c-client library for dealing wit= h all<br> this stuff, which means that implementing this would need to be done at<br> that level, which is more difficult for me than just modifying Mahogany<br> itself. But OTOH it's not the only application using this library and i= t<br> looks like Alpine (the successor to Pine) has already implemented it, see<b= r> <a href=3D"https://repo.or.cz/alpine.git/blob/HEAD:/imap/src/c-client/oauth= 2_aux.c" rel=3D"noreferrer" target=3D"_blank">https://repo.or.cz/alpine.git= /blob/HEAD:/imap/src/c-client/oauth2_aux.c</a> and<br> so perhaps we could just use their version.<br> <br> =C2=A0IOW this is not completely hopeless, but definitely requires some wor= k. I<br> might have a look at this, but no promises. For now I've created <a hre= f=3D"https://github.com/vadz/mahogany/issues/1" rel=3D"noreferrer" target= =3D"_blank">https://github.com/vadz/mahogany/issues/1</a> which you can mon= itor if you'd like to know when/if anything happens there.<br> <br> =C2=A0Best regards,<br> VZ<br> _______________________________________________<br> Mahogany-Users mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blank">M= [email protected]</a><br> <a href=3D"https://lists.sourceforge.net/lists/listinfo/mahogany-users" rel= =3D"noreferrer" target=3D"_blank">https://lists.sourceforge.net/lists/listi= nfo/mahogany-users</a><br> </blockquote></div> --000000000000170c720634290da4-- --===============2940517136550760123== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============2940517136550760123== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Mahogany-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mahogany-users --===============2940517136550760123==--