1930052 - Send fails using Microsoft outgoing server with OAuth2 when using gmail alias for sign-in to the Microsoft account

Status: RESOLVED INCOMPLETE

(Thunderbird :: Security, defect)

Description

[Ed Balazs]

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0

Steps to reproduce:

1: In the Microsoft account, ed.balazs@ under Sign-in preferences – Account aliases, the primary alias name which is different, [e-mail] is giving me problems. Initially, carelessly 3 years ago, I thought it was extra sign-in security.
2: The account was used successfully before Sept 2,2024 when OAUTH2 was mandatory. After it wasn't used.
3: Microsoft Authenticator App, 2-step verification was added 2 weeks ago.
4: However, clicking back and forth I’m blocked until next week to correct my primary alias name.

Actual results:

1: Only with OAUTH2, the Thunderbird Email PC software won’t send from the outgoing server, since applied 2 weeks ago. The account worked properly it seemed with a normal password for 3 years.
2: Also, Thunderbird for Android, mobile seems to have the same problem with Account aliases and OAUTH2.
3: Fairmail App on Android correctly works with this same account.
4: Gmail Authentication , signed in with Microsoft works with another @outlook.com account but without Microsoft Authenticator App, 2-step verification.
5: If Microsoft Android Authenticator App, 2-step verification was the problem then everyone would be screaming at Thunderbird for not sending, smtp.

Expected results:

1: Solution: Ed will remove Account aliases; but Thunderbird needs to repair 115.16.2 and below, or all of them currently available, to accept Account aliases. Thunderbird needs to inform of this problem at the least with Authentication: OAUTH2.
2: Thunderbird PC and Android App works properly with a normal password for 3 years.
3: Now works with send a code to multiple Email addresses.
4: doesn't work with Account aliases (primary), OAUTH2 and Microsoft Authenticator App, 2-step verification.

Thanks, Ed Balazsovits

Comment 1

[Magnus Melin [:mkmelin]]

Please try v128. But, for OAuth2 sign-in there have been issues with sign-in using aliases (not much Thunderbird could do about that) in general. Certainly if the alias is not even a MS account, I'd not expect that to necessarily work.

Comment 2

[Wayne Mery (:wsmwk)]

Ed ?

Comment 3

[Phoenix]

Resolved per whiteboard