2019793 - add ability to use system browser for OAuth flow

Status: RESOLVED FIXED

(Thunderbird :: Account Manager, enhancement)

Description

[Justin Tracey [:jtracey]]

This is not confirmation that we'll actually go down this path, but it helps to have an issue to associate the discussion with. See https://phabricator.services.mozilla.com/D282628 for discussion on why this would be useful.

Comment 1

[Justin Tracey [:jtracey]]

Attachment: Bug 2019793 - Listen on http://localhost OAuth redirect targets. r=darktrojan

By opening the OAuth login page in a browser, we can listen for a request and
send the URI with parameters back to the normal flow on our end. This allows
existing browser sessions to be usable as authentication, and enables passkey
support on macOS for default localhost redirect targets (notably circumventing
the conflict between Google's anti-custom redirect stance and macOS's callback
design). The new behavior is behind a pref that is enabled for testing builds,
but https redirect targets will continue to use the prior flow regardless.

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/comm-central/rev/b96416c37050
Listen on http://localhost OAuth redirect targets. r=darktrojan

Comment 3

[Wayne Mery (:wsmwk)]

FWIW, the original bug which implemented oauth, and it's long discussion, Bug 849540 - Log in to Gmail (IMAP/SMTP) using OAuth in backend