[conspire] (forw) Re: [Golugtech] Fw: [Alpine-info] O365 XOAUTH2 via fetchmail

[Rick Moen]

Quoting Akkana Peck (akkana at shallowsky.com):

[you spent about half a day trying to implement Google's
wrapping of OAuth 2.0 into SMTP to authenticate postings to Google
Groups]

> I have to use Google's SMTP server when I post to google groups.
> I currently use msmtp, password authenticated. 

And simple password auth works, for that?  I'm glad if it does (for your
sake).  Perhaps you mean it works for that, but XOAUTH2 is mandated for
GMail specifically.

> So I just spent about half a day flailing away at that, with no success.
> But the problem has nothing to do with paying for app verification;
> it's more to do with Google's old scripts and documentation that
> haven't been updated as they changed the server side.

Heh.  The cynical take on that would be that this is the
passive-aggressive way to discourage people, but certainly a more
parsimonious explanation is that developers hate writing documentation.
;->

> But assuming you can get some access tokens (the step that
> consistently fails for me), at least for now, if you're just trying
> to use let a small number of users use gmail, it seems you can leave
> your app in development mode (don't click Publish), set yourself up
> as a test user, and not need app verification.

Aha.  Thanks for clarification, which presumably will be useful to
some.