Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Custom oauth2 client ID for Gmail

#2757

I want to use MailMate for my work Gmail account, but Gsuite policy requires that I create my own oauth2 client ID instead of using MailMate's. Can there be a text box where I can specify my own?

Reported by Theodore Dubois · February 12th, 2021 @ 09:05 PM

State: new
Milestone: none
Assigned to: benny benny

Activity

  1. benny
    benny

    Sorry about the late reply. Recently I did add (for debug purposes) that a specific client id/secret could be specified, but I'm unsure what the point of doing this would be. MailMate had to go through a verification process with various demands in order to be allowed to access Gmail using OAuth2. Wouldn't you have to do the same thing?

    Rant: The use of a client id/secret makes little sense in general for OAuth2 for Desktop clients, but it doesn't seem anyone really takes that seriously. MailMate could easily pretend to be Thunderbird or any app/utility could pretend to be MailMate. There's no real security in the vetting process of any desktop applications. OAuth2 provides a way for email clients to access email accounts without getting direct access to the password of the user. At the same time it provides a way to get 2FA since that is often part of the browser-based authentication methods. This part is real security.

    Write me via “Help > Send Feedback” if you want access to the configuration of a specific client id/secret. It's not something I'd like to share publicly at the moment.

    May 28th, 2021 @ 06:07 AM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.