Re: oauth to be required for gmail

[David Engster <deng@randomsample.de>]

> Robert Pluim <rpluim@gmail.com> writes:
>
>> I think the canonical package for doing this is
>> <https://github.com/ccrusius/auth-source-xoauth2>, although I haven't
>> tried it yet.
>
> It's comically convoluted to use oauth for open source software:
>
>   https://github.com/ccrusius/auth-source-xoauth2/blob/8cef77b0d390f8a45e7690eaf8772173e1995a9b/auth-source-xoauth2.el#L79
>
> Here's a recipe for Mutt, which one Hackernews described as "you just
> have to run a script":
>
>   https://luxing.im/mutt-integration-with-gmail-using-oauth/
>
> Now, what closed source software does is do all the first steps for you:
> Register an app on Google, get a secret key etc, so all the user has to
> do it go through a web-based login thing.
>
> I don't think this is much of an option for Gnus?  Gnus Inc registering
> an app that's allowed to access Gmail accounts?  I'd have to go through
> a security audit process (typically costing $50K, if I understand
> correctly) and, still, it's pretty much impossible as the secret key
> would have to be distributed some way, wouldn't it?  Or...  is that a
> solved problem?

I don't think so, see my other mail I've just written. See also this
answer here, which I think is still the current situation:

https://stackoverflow.com/a/28109307

-David