Thanks alot Rayan,
       I really appreciate your prompt response. can i have a copy of
your portlet, or any sample to develop a gadget similar to the one on
the google apps start page, which shows the recent emails. I'll try to
find a workaround for the passwords. I'm thinking of temporarily
resetting the pasword during the fetteching the feed and then
restoring it to its original hash affter getting the feed! do you
think this would work?

don't forget to send me a copy of your portlet, if possible.

Thanks, Marmina.

On Jan 15, 7:49 pm, "Ryan Shelley" <[EMAIL PROTECTED]> wrote:
> You can't access the content of a user's mailbox with anything less than
> their username and password.
>
> About a year ago I had developed a portlet to do this, but you're right, it
> required the user's password in clear text.  What we did to work around this
> was to use the SSO solution from Google to authenticate the users to their
> mailboxes, and create a random password we stored securely to access the
> mailbox behind the scenes (for the portlet, for example).  However, this
> causes other issues, such as not being able to access the mailbox via
> IMAP/POP.
>
> However, Google now allows you to create/modify an account with an SHA-1
> encrypted string as the password.  If your user directory currently stores
> passwords as SHA-1 encrypted strings, then you can replicate those passwords
> to the user's Google account.  Now, this is where it gets a bit sketchy, and
> I don't recommend it, so we'll just consider this a "hypothetical."  When
> the user logs in to your SSO solution, you could capture their password,
> two-way encrypt it, and store it in their session.  When you need to preview
> their mailbox, you decrypt the password in the user's session, and send it
> to Google in a Authentication request to be used with an ATOM feed.  Again,
> I'm just brainstorming here.
>
> I hope that helps!
>
> -Ryan
>
> On Jan 15, 2008 8:21 AM, Marmina ABDEL-MALEK <[EMAIL PROTECTED]> wrote:
>
>
>
>
>
> > We want to dispaly the recent emails of a user in our portel. we want
> > to retrieve this email feed using the domain admin credentials and not
> > the users.
>
> > is there a way to grab this info using PHP or any other language? if
> > not, do you a portlet/widget that we can embed in our portal to
> > display the recent email feed?
>
> > if you any code example to implement this functionality, please post
> > it.
>
> > Notes:
> > - we have implemnted  SSO and integrated it with google apps.
> > - we don't want to grab the feed using
> > http://username:[EMAIL PROTECTED]
> > (as it entitles that we know the plain text password of a user)
> > - we don't to use the gmail mobile edition in an iframe, because it is
> > not convenient.- Hide quoted text -
>
> - Show quoted text -
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Apps APIs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/google-apps-apis?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to