From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Tim Cross Newsgroups: gmane.emacs.devel Subject: Re: gmail+imap+smtp (oauth2) Date: Fri, 06 May 2022 19:04:20 +1000 Message-ID: <87ee172fjz.fsf@gmail.com> References: <871qxbdulc.fsf@mat.ucm.es> <87k0b2tkg1.fsf@mat.ucm.es> <87zgjx4qhs.fsf@gmail.com> <87bkwcgmr3.fsf@mat.ucm.es> <87levfzqj2.fsf@yale.edu> <871qx7scvi.fsf@gmail.com> <87v8ujqec5.fsf@logand.com> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="38261"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: mu4e 1.7.13; emacs 28.1.50 Cc: "Jorge A. Alfaro-Murillo" , emacs-devel@gnu.org To: Tomas Hlavaty Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Fri May 06 11:11:01 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nmtzJ-0009jb-79 for ged-emacs-devel@m.gmane-mx.org; Fri, 06 May 2022 11:11:01 +0200 Original-Received: from localhost ([::1]:54134 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nmtzI-00081M-3P for ged-emacs-devel@m.gmane-mx.org; Fri, 06 May 2022 05:11:00 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:35150) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nmtxo-0007Ds-JL for emacs-devel@gnu.org; Fri, 06 May 2022 05:09:28 -0400 Original-Received: from mail-pf1-x434.google.com ([2607:f8b0:4864:20::434]:46767) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nmtxn-0007UM-0A for emacs-devel@gnu.org; Fri, 06 May 2022 05:09:28 -0400 Original-Received: by mail-pf1-x434.google.com with SMTP id j6so5747446pfe.13 for ; Fri, 06 May 2022 02:09:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=references:user-agent:from:to:cc:subject:date:in-reply-to :message-id:mime-version; bh=2LZXyPsm+NYE2RFxCT29ZZV75Mz5gEoh4Z5hcb3N+1M=; b=AAe9ihYdv9QaQtP0Xtqwg2x/zSDk0rqGbFBRrMqz4PlNF17iIqQ0WZOEiUmy5OoRAM NCX3ArNc9YsdnfFp073AITFuBVrF5shvhV73XuLuY6SvUs0bqipkdgtautlJ/KNqXKH4 cgK0rFGRo4w+8dcnKL2VtGctVCCSFKz/jj6IVGiDmM6iCQ1gSodPCrNlKIaBx2nnNrYY oM6RDydn55SWVbZYyzW9Ei9QBjZ/2NSezNuHegZjzuKgc7iyNugkPIiVjjdfYalnEUNe 8XYEC+zdLANfQMhoihsj3KiPAo9Dr2G5vyqZCIx3DkDJvQUhQti+bcOaRfCwJl6ek7QN Q/TA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:references:user-agent:from:to:cc:subject:date :in-reply-to:message-id:mime-version; bh=2LZXyPsm+NYE2RFxCT29ZZV75Mz5gEoh4Z5hcb3N+1M=; b=KDOnipXy0QAA6ku6GJ08PfnJp3eHkoDafTxLIXi1qvvBhR0IhPV3VZbTCwUu5GNu/a g3J0OYNiFh7tyAf04GINe3zyJEvuaQaIpUIzSdQ/2I5VWQLA/ICkKvfLuyLP2AvOc0Me j2W9YicDkOVlSrntqUUgyOFRuxdbc273/mHwLzuvnoweX2zQnsj48tpIR79VaKixYB+p ReU4QmCs2w6mGw5f84dWRmQCuIZ5s/iWKTknu37bh9QuDM2D5vcjDwJLYyq37sGlYVo1 sUou6Li2NK08b7+J0g7C/kt5vR9zvhz9gpl14XWuOHGQD388t4WSvPu5dLj+Wvcj13oT Pdyg== X-Gm-Message-State: AOAM531tRGqBYj8zaTXM0azy5bzINTgvcISKeHWVzl+qNBmPiW0ZrWbG V06gzhkj0dAZhtLAy/9+zBW5SeJvI3s= X-Google-Smtp-Source: ABdhPJyGJyvlqDfgSaMqZkXggCIgWJI9BZ3odiw8GEs3cf9W4SySuqkpdQLSItaOwOx7iDe5t8mtNg== X-Received: by 2002:a05:6a00:1c5c:b0:505:7469:134a with SMTP id s28-20020a056a001c5c00b005057469134amr2367524pfw.16.1651828165207; Fri, 06 May 2022 02:09:25 -0700 (PDT) Original-Received: from dingbat (220-235-29-41.dyn.iinet.net.au. [220.235.29.41]) by smtp.gmail.com with ESMTPSA id s2-20020a170902b18200b0015e8d4eb2e0sm1122746plr.298.2022.05.06.02.09.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 02:09:24 -0700 (PDT) In-reply-to: <87v8ujqec5.fsf@logand.com> Received-SPF: pass client-ip=2607:f8b0:4864:20::434; envelope-from=theophilusx@gmail.com; helo=mail-pf1-x434.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:289304 Archived-At: Tomas Hlavaty writes: > On Fri 06 May 2022 at 10:43, Tim Cross wrote: >> As I understand it, the key issue regards the application ID. Google's >> T&C imply this must be kept secret (it is an ID assigned by Google once >> your application has been approved and is used in the code). Problem >> being, how can you have that ID be in the code and be secret. > > Is the application id created by google when the oauth2 is configured by > a university? No. The application ID is provided by Google once the application has been approved by them. The flow sort of goes 1. Register wiht google as a developer. This gives you a developer ID which yu can use as an application ID. 2. Develop your application which uses oath2 to connect to google. 3. Submit your application for approval by google. 4. Once approved, Google gives you an application ID which is used by your application. 5. Release your application Problem is, Google T&C require that the application ID is kept secret. For open source, this is a problem because we cannot add the applicaiton ID and keep it secret while making the code open source.