From: David De La Harpe Golden <david@harpegolden.net>
To: emacs-devel@gnu.org
Subject: Re: Making GNUS continue to work with Gmail
Date: Sun, 16 Aug 2020 18:23:18 +0100 [thread overview]
Message-ID: <f86b5b42-54cb-fb53-ed43-7dd823e538d8@harpegolden.net> (raw)
In-Reply-To: <87bljb1ywk.fsf@cesars-w520.i-did-not-set--mail-host-address--so-tickle-me>
On 15/08/2020 20:39, Cesar Crusius wrote:
> From what I've seen from Kmail/Kontact/KPim/etc replies, (a) and (b) is exactly what they are doing, and there's no way around this. The only question is how to achieve those in a way that is compatible with both Google terms and FSF requirements, if there is such a way. Thunderbird "achieves" (b) by having "secret" keys in source code. I don't know what the K* applications do, it did not seem to be specified in their discussions.
>
For the morbidly curious like myself:
N.B. I'm far from familiar with the sprawling KDE sources in general,
but it's freely licensed (LGPL), so had a quick look.
Anyway, their source-embedded static values were trivial to locate at
time of writing:
https://invent.kde.org/pim/kdepim-runtime/-/blob/master/resources/imap/gmailpasswordrequester.cpp#L16
https://invent.kde.org/pim/kdepim-runtime/-/blob/master/resources/google-groupware/googlesettings.cpp#L143
https://invent.kde.org/pim/kmailtransport/-/blob/master/src/kmailtransport/plugins/smtp/smtpjob.cpp#L32
The referenced kde KGAPI component (implements enough oauth2 to work
against google) appears to be use the
spawn-transient-http-server-on-localhost redirect_uri approach/trick to
pick up the authorization code (to convert to access+refresh tokens with
second request). Don't seem to be doing code_challenge/code_verifier
i.e. pkce /rfc7636 yet (presumably should). To make the request they
actually currently appear to use / still use embedded webview, not
delegating to user's browser, in contrast to recent
https://tools.ietf.org/html/rfc8252#section-8.12
(skipping pkce and embedded webview may be "grandfathered in", can well
imagine google and other providers frowning on it for newly-issued app
client ids)
https://invent.kde.org/pim/libkgapi/-/blob/master/src/core/ui/authwidget.cpp#L100
code req to auth endpoint
https://invent.kde.org/pim/libkgapi/-/blob/master/src/core/ui/authwidget.cpp#L121
code response receipt
https://invent.kde.org/pim/libkgapi/-/blob/master/src/core/ui/authwidget_p.cpp#L277
code->token req to token endpoint
https://invent.kde.org/pim/libkgapi/-/blob/master/src/core/private/newtokensfetchjob.cpp#L88
token response processed
https://invent.kde.org/pim/libkgapi/-/blob/master/src/core/private/newtokensfetchjob.cpp#L124
next prev parent reply other threads:[~2020-08-16 17:23 UTC|newest]
Thread overview: 158+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-05-19 2:05 bug#41386: 28.0.50; Gnus nnimap OAuth 2.0 support Thomas Fitzsimmons
2020-05-19 12:46 ` Lars Ingebrigtsen
2020-05-19 12:58 ` Noam Postavsky
2020-05-19 13:12 ` Lars Ingebrigtsen
2020-05-20 4:02 ` Richard Stallman
2020-05-19 15:37 ` Thomas Fitzsimmons
2020-05-19 16:00 ` David Engster
2020-05-19 16:12 ` Lars Ingebrigtsen
2020-05-20 3:59 ` Richard Stallman
2020-05-20 13:32 ` Stefan Kangas
2020-05-20 16:16 ` Thomas Fitzsimmons
2020-05-21 3:45 ` Richard Stallman
2020-07-19 1:29 ` Lars Ingebrigtsen
2020-07-20 2:40 ` Richard Stallman
2020-08-10 16:13 ` Simon Leinen
2020-08-11 3:28 ` Richard Stallman
2020-08-11 20:56 ` Simon Leinen
2020-05-22 3:07 ` Richard Stallman
2020-05-22 8:28 ` David Engster
2020-05-20 3:53 ` Richard Stallman
2020-05-20 14:05 ` Thomas Fitzsimmons
2020-05-21 3:47 ` Richard Stallman
2020-05-21 14:30 ` Thomas Fitzsimmons
2020-05-22 3:09 ` Richard Stallman
2020-05-23 15:49 ` Thomas Fitzsimmons
2020-05-24 3:54 ` Richard Stallman
2020-05-24 14:35 ` Thomas Fitzsimmons
2020-05-25 4:38 ` Richard Stallman
2020-07-23 4:07 ` Richard Stallman
2020-07-23 13:22 ` Lars Ingebrigtsen
2020-07-24 3:33 ` Richard Stallman
2020-07-24 14:54 ` Lars Ingebrigtsen
2020-07-25 3:49 ` Richard Stallman
2020-07-27 21:55 ` Lars Ingebrigtsen
2020-07-30 0:39 ` 황병희
2020-07-30 3:04 ` Richard Stallman
2020-08-06 3:45 ` Making GNUS continue to work with Gmail Richard Stallman
2020-08-06 5:51 ` 황병희
2020-08-06 17:08 ` Cesar Crusius
2020-08-06 17:32 ` Robert Pluim
2020-08-06 18:09 ` Cesar Crusius
2020-08-11 13:43 ` Colin Baxter
2020-08-11 13:55 ` Colin Baxter
2020-08-11 15:19 ` Uwe Brauer
2020-08-11 15:22 ` Uwe Brauer
2020-08-11 16:02 ` Colin Baxter
2020-08-12 2:29 ` Richard Stallman
2020-08-12 5:29 ` Colin Baxter
2020-08-07 2:56 ` Richard Stallman
2020-08-07 17:02 ` Cesar Crusius
2020-08-07 18:37 ` Michael Anckaert
2020-08-08 0:01 ` Cesar Crusius
2020-08-08 0:53 ` T.V Raman
2020-08-08 3:53 ` Richard Stallman
2020-08-08 3:53 ` Richard Stallman
2020-08-08 3:54 ` Richard Stallman
2020-08-09 7:59 ` Uwe Brauer
2020-08-09 8:40 ` Lars Ingebrigtsen
2020-08-09 10:02 ` Uwe Brauer
2020-08-10 3:23 ` Richard Stallman
2020-08-10 6:43 ` Uwe Brauer
2020-08-10 9:03 ` Robert Pluim
2020-08-10 11:36 ` Uwe Brauer
2020-08-11 3:30 ` Richard Stallman
2020-08-09 10:06 ` Uwe Brauer
2020-08-09 10:36 ` Lars Ingebrigtsen
2020-08-09 10:57 ` Robert Pluim
2020-08-09 11:03 ` Robert Pluim
2020-08-09 13:06 ` 황병희
2020-08-09 16:04 ` Uwe Brauer
2020-08-09 13:01 ` 황병희
2020-08-09 16:06 ` Uwe Brauer
2020-08-10 1:03 ` 황병희
2020-08-10 15:54 ` T.V Raman
2020-08-11 2:40 ` 황병희
2020-08-11 9:59 ` Robert Pluim
2020-08-11 12:54 ` 황병희
2020-08-11 15:25 ` Uwe Brauer
2020-08-11 16:11 ` Robert Pluim
2020-08-11 18:05 ` João Távora
2020-08-11 18:17 ` Robert Pluim
2020-08-12 2:27 ` Richard Stallman
2020-08-12 4:27 ` 황병희
2020-08-12 3:41 ` arthur miller
2020-08-12 6:42 ` tomas
2020-08-12 12:11 ` Arthur Miller
2020-08-12 15:55 ` Stefan Monnier
2020-08-12 16:00 ` tomas
2020-08-12 6:54 ` Uwe Brauer
2020-08-12 7:53 ` tomas
2020-08-12 12:40 ` Uwe Brauer
2020-08-13 2:09 ` 황병희
2020-08-13 2:51 ` Stefan Monnier
2020-08-13 6:48 ` Uwe Brauer
2020-08-12 11:30 ` Eric S Fraga
2020-08-12 12:40 ` Arthur Miller
2020-08-12 13:02 ` Eric S Fraga
2020-08-12 17:13 ` Eric Abrahamsen
2020-08-13 15:39 ` David De La Harpe Golden
2020-08-13 17:40 ` David Engster
2020-08-13 17:53 ` Stefan Monnier
2020-08-14 10:06 ` Lars Ingebrigtsen
2020-08-15 4:35 ` Richard Stallman
2020-08-14 10:13 ` Lars Ingebrigtsen
2020-08-14 14:49 ` Uwe Brauer
2020-08-14 14:56 ` Lars Ingebrigtsen
2020-08-14 17:24 ` Uwe Brauer
2020-08-14 17:39 ` Cesar Crusius
2020-08-15 4:44 ` Richard Stallman
2020-08-15 9:45 ` Gregory Heytings via Emacs development discussions.
2020-08-17 6:00 ` 范凯
2020-08-17 8:23 ` tomas
2020-08-17 12:30 ` Gregory Heytings via Emacs development discussions.
2020-08-17 15:09 ` tomas
2020-08-17 13:03 ` David De La Harpe Golden
2020-08-15 11:09 ` Robert Pluim
2020-08-16 4:13 ` Richard Stallman
2020-08-16 8:17 ` Gregory Heytings via Emacs development discussions.
2020-08-17 3:23 ` Richard Stallman
2020-08-17 7:51 ` Gregory Heytings via Emacs development discussions.
2020-08-17 16:05 ` David De La Harpe Golden
2020-08-18 4:08 ` Richard Stallman
2020-08-18 9:15 ` Gregory Heytings via Emacs development discussions.
2020-08-21 3:38 ` Richard Stallman
2020-08-21 17:16 ` Gregory Heytings via Emacs development discussions.
2020-08-22 7:24 ` Arthur Miller
2020-08-22 9:44 ` Gregory Heytings via Emacs development discussions.
2020-08-23 4:46 ` Richard Stallman
2020-08-17 15:02 ` Uwe Brauer
2020-08-17 16:44 ` Gregory Heytings via Emacs development discussions.
2020-08-17 19:34 ` Uwe Brauer
2020-08-17 21:47 ` Gregory Heytings via Emacs development discussions.
2020-08-18 4:10 ` Richard Stallman
2020-08-18 4:11 ` Richard Stallman
2020-08-26 14:44 ` Eric S Fraga
2020-08-26 20:22 ` Pierre Téchoueyres
2020-08-27 11:25 ` Eric S Fraga
2020-08-27 2:50 ` Richard Stallman
2020-08-27 11:28 ` Eric S Fraga
2020-08-27 12:03 ` tomas
2020-08-27 12:26 ` Making GNUS continue to work with Gail Eric S Fraga
2020-08-27 12:30 ` Making GNUS continue to work with Gmail Andrew Cohen
2020-08-27 12:52 ` Eric S Fraga
2020-08-28 3:49 ` Richard Stallman
2020-08-28 5:35 ` Andrew Cohen
2020-08-29 4:10 ` Richard Stallman
2020-08-28 3:50 ` Richard Stallman
2020-09-01 16:23 ` Uwe Brauer
2020-09-02 9:57 ` Pankaj Jangid
2020-08-15 19:39 ` Cesar Crusius
2020-08-16 17:23 ` David De La Harpe Golden [this message]
2020-08-16 11:54 ` Uwe Brauer
2020-08-16 14:27 ` David De La Harpe Golden
2020-08-11 16:09 ` Mingde (Matthew) Zeng
2020-08-12 2:28 ` Richard Stallman
2020-08-12 6:47 ` tomas
2022-10-29 15:36 ` bug#41386: 28.0.50; Gnus nnimap OAuth 2.0 support Björn Bidar via Bug reports for GNU Emacs, the Swiss army knife of text editors
2022-10-30 12:22 ` Deus Max
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=f86b5b42-54cb-fb53-ed43-7dd823e538d8@harpegolden.net \
--to=david@harpegolden.net \
--cc=emacs-devel@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/emacs.git
https://git.savannah.gnu.org/cgit/emacs/org-mode.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.