Open Bug 1888604 Opened 2 years ago Updated 4 months ago

Support Oauth2 for bugmail SMTP (Gmail/Office365)

Categories

(Bugzilla :: Email Notifications, enhancement)

Product:
Bugzilla
Component:
Email Notifications
Type:
enhancement

Tracking

()

People

(Reporter: justdave, Unassigned)

References

(Blocks 1 open bug)

Details

Google is dropping support for authenticating to smtp.gmail.com with a password effective September 30, 2024 (see https://support.google.com/accounts/answer/6010255?hl=en )

We need to support Oauth2 for sending notification emails by then or Bugzilla will no longer be able to use a Gmail account for sending bugmail.

Google's docs on the topic: https://developers.google.com/gmail/imap/xoauth2-protocol

We may have to write upstream code. Email::Sender will support anything that Authen::SASL supports. But Authen::SASL does not currently appear to implement the XOAUTH2 method.

I asked a friend of mine to commit on this and his reply was "This does not look difficult and there already exists code like https://github.com/Veltro-pm/perl-gmail-oauth2"

Office365 also dropped support for password auth in September 2025.

Oauth2 is the way of the future for SMTP it looks like.

Blocks: bugzilla-6
Summary: Support Oauth2 for bugmail SMTP (Gmail) → Support Oauth2 for bugmail SMTP (Gmail/Office365)

Authen::SASL gained minimal support of the XOAUTH2 method - https://metacpan.org/pod/Authen::SASL::Perl::XOAUTH2

You need to log in before you can comment on or make changes to this bug.