Re: Gmail, LSA, and OAuth

2020-03-22 Thread Randy Kaempen via 4D_Tech 
Alexander,

> On Mar 22, 2020, at 6:02 AM, Herr Alexander Heintz  
> wrote:
> 
> I just looked into accessing GMail through OAuth2.
> From the technical point it is not a problem, I can easily adapt the tools I 
> have for MS OAuth2 to work with Google.
> The process for app registration however is much more complicated than with 
> MS…
> You need to submit you application to Google for verification and depending 
> on the type of data you want to access with Google (that includes GMail) you 
> may be requested to do an external security audit for you App, costs anywhere 
> from 15 to 75 k.
> I will start that process for my App once I have the Connector going, and 
> will keep you posted on what to do.

Very cool.

> Most likely I will put it on my blog.

Where is that?

> If you want to start reading into the requirements, you might want to start 
> here:
> 
> https://support.google.com/cloud/answer/9110914 
> 
Thanks.


Randy Kaempen
Intellex Corporation



**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Gmail, LSA, and OAuth

2020-03-22 Thread Herr Alexander Heintz via 4D_Tech 
I just looked into accessing GMail through OAuth2.
From the technical point it is not a problem, I can easily adapt the tools I 
have for MS OAuth2 to work with Google.
The process for app registration however is much more complicated than with MS…
You need to submit you application to Google for verification and depending on 
the type of data you want to access with Google (that includes GMail) you may 
be requested to do an external security audit for you App, costs anywhere from 
15 to 75 k.
I will start that process for my App once I have the Connector going, and will 
keep you posted on what to do.
Most likely I will put it on my blog.

If you want to start reading into the requirements, you might want to start 
here:

https://support.google.com/cloud/answer/9110914 


Chers,
stay safe
stay sane
stay healthy
> 

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Gmail, LSA, and OAuth

2020-03-19 Thread Tom Benedict via 4D_Tech 
I support a 4D app which currently uses Twilio sendgrid.net send all outbound 
email.  While our email volume is modest Iaven’t run into any issues with it. 
Seems stable.

Tom Benedict

> On Mar 19, 2020, at 13:50, Chuck Miller via 4D_Tech <4d_tech@lists.4d.com> 
> wrote:
> 
> what relay would you propose. 
> 
> Regards
> 
> Chuck
> 
> 
>> On Mar 19, 2020, at 12:44 PM, Mike Kerner via 4D_Tech <4d_tech@lists.4d.com> 
>> wrote:
>> 
>> or you can do this a different way - using a mail relay.  that way your 4d
>> app doesn't have to be changed.  the relay accepts your smtp and then
>> relays the message to google.
> 

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Gmail, LSA, and OAuth

2020-03-19 Thread Chuck Miller via 4D_Tech 
what relay would you propose. 

Regards

Chuck

 Chuck Miller Voice: (617) 739-0306
 Informed Solutions, Inc. Fax: (617) 232-1064   
 mailto:cjmillerinformed-solutions.com 
 Brookline, MA 02446 USA Registered 4D Developer
   Providers of 4D and Sybase connectivity
  http://www.informed-solutions.com  

This message and any attached documents contain information which may be 
confidential, subject to privilege or exempt from disclosure under applicable 
law.  These materials are intended only for the use of the intended recipient. 
If you are not the intended recipient of this transmission, you are hereby 
notified that any distribution, disclosure, printing, copying, storage, 
modification or the taking of any action in reliance upon this transmission is 
strictly prohibited.  Delivery of this message to any person other than the 
intended recipient shall not compromise or waive such confidentiality, 
privilege or exemption from disclosure as to this communication. 

> On Mar 19, 2020, at 12:44 PM, Mike Kerner via 4D_Tech <4d_tech@lists.4d.com> 
> wrote:
> 
> or you can do this a different way - using a mail relay.  that way your 4d
> app doesn't have to be changed.  the relay accepts your smtp and then
> relays the message to google.

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Gmail, LSA, and OAuth

2020-03-19 Thread Mike Kerner via 4D_Tech 
or you can do this a different way - using a mail relay.  that way your 4d
app doesn't have to be changed.  the relay accepts your smtp and then
relays the message to google.

On Wed, Mar 18, 2020 at 8:32 PM Guy Algot via 4D_Tech <4d_tech@lists.4d.com>
wrote:

> 100% agree.
>
> > On Mar 18, 2020, at 3:59 PM, Randy Kaempen via 4D_Tech <
> 4d_tech@lists.4d.com> wrote:
>
> > Since the 4D Internet Commands are something that many companies use, it
> seems like it would be a good idea for us as a group to work on a way to
> move forward, either adding a framework which adds the OAuth around those
> commands or replacing them entirely.  An approach which handles to Google
> situation as well as other email systems would be useful to everyone going
> forward.
> >
> >
> > Randy Kaempen
> > Intellex Corporation
> >
>
>
> Later,
> Guy
>
> --
> Guy Algot, Solutions Specialist
> Edmonton, Alberta
> (780) 974-8538
>
> hardware, installation, training, support, programming, internet
> specializing in 4th Dimension
> =-= =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> "Microsoft is a cross between the Borg and the Ferengi. Unfortunately,
> they use Borg to do their marketing and Ferengi to do their programming."
> -- Simon Slavin
>
>
>
> **
> 4D Internet Users Group (4D iNUG)
> Archive:  http://lists.4d.com/archives.html
> Options: https://lists.4d.com/mailman/options/4d_tech
> Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
> **



-- 
On the first day, God created the heavens and the Earth
On the second day, God created the oceans.
On the third day, God put the animals on hold for a few hours,
   and did a little diving.
And God said, "This is good."
**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Gmail, LSA, and OAuth

2020-03-18 Thread Guy Algot via 4D_Tech 
100% agree.

> On Mar 18, 2020, at 3:59 PM, Randy Kaempen via 4D_Tech <4d_tech@lists.4d.com> 
> wrote:

> Since the 4D Internet Commands are something that many companies use, it 
> seems like it would be a good idea for us as a group to work on a way to move 
> forward, either adding a framework which adds the OAuth around those commands 
> or replacing them entirely.  An approach which handles to Google situation as 
> well as other email systems would be useful to everyone going forward.
> 
> 
> Randy Kaempen
> Intellex Corporation
> 


Later,
Guy

--
Guy Algot, Solutions Specialist
Edmonton, Alberta
(780) 974-8538

hardware, installation, training, support, programming, internet
specializing in 4th Dimension
=-= =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
"Microsoft is a cross between the Borg and the Ferengi. Unfortunately,
they use Borg to do their marketing and Ferengi to do their programming."
-- Simon Slavin



**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Gmail, LSA, and OAuth

2020-03-18 Thread Keisuke Miyako via 4D_Tech 
less-secure-app is basically synonymous to SMTP.

you need to think about sending email without SMTP.

---

you can send Gmail (OAuth) with simple HTTP requests.
OAuth meaning, you authenticate the account and authorise the app via a trusted 
browser.
https://github.com/4D-JP/4d-tips-google-mail

you can also access G Suite API via HTTP requests.
https://github.com/miyako/4d-tips-google-service-account

2020/03/19 6:43、David Rose via 4D_Tech 
<4d_tech@lists.4d.com>のメール:
How is this done in 4D in conjunction with the 4D SMTP commands?

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Gmail, LSA, and OAuth

2020-03-18 Thread Randy Kaempen via 4D_Tech 

> On Mar 18, 2020, at 4:52 PM, Herr Alexander Heintz via 4D_Tech 
> <4d_tech@lists.4d.com> wrote:
> 
> Am 18.03.2020 um 22:43 schrieb David Rose via 4D_Tech <4d_tech@lists.4d.com>:
> 
>> How is this done in 4D in conjunction with the 4D SMTP commands?
> 
> NOT
> AT
> ALL
> 
> we apologize for the inconvenience…
> 
> but in all seriousness:
> 
> Everybody is currently switching to other system standards.
> Office 365 still supports imap/smtp with plain authentication, but that will 
> go away as well.
> We currently use office 365 vi Exchange Web Services, with MS OAuth2.
> It was a pain to implement…
> There is some good stuff from Keisuke concerning OAuth2, but a lot more needs 
> to be done in order to continue using IMAP.
> SMTP will live a little longer, IMAP will force you to switch from palin 
> authentication to bearer authentication where you send a token.
> It sadly requires interaction by the user from time to time, no idea if 
> Google has any system for Admin impersonation in place like MS Azure does.
> 
> I might release component in the near future that does MS OAuth against Azure.
> 
> As for Google and others, I will have to find the time to get into that.

Since the 4D Internet Commands are something that many companies use, it seems 
like it would be a good idea for us as a group to work on a way to move 
forward, either adding a framework which adds the OAuth around those commands 
or replacing them entirely.  An approach which handles to Google situation as 
well as other email systems would be useful to everyone going forward.


Randy Kaempen
Intellex Corporation

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Gmail, LSA, and OAuth

2020-03-18 Thread UKVetDerm via 4D_Tech 
Is there any possibility that the new MAIL commands in version 18 will sort out 
these shortcomings? 

On 18/03/2020, 21:53, "4D_Tech on behalf of Herr Alexander Heintz via 4D_Tech" 
<4d_tech-boun...@lists.4d.com on behalf of 4d_tech@lists.4d.com> wrote:

Am 18.03.2020 um 22:43 schrieb David Rose via 4D_Tech 
<4d_tech@lists.4d.com>:

> How is this done in 4D in conjunction with the 4D SMTP commands?

NOT
AT
ALL

we apologize for the inconvenience…

but in all seriousness:

Everybody is currently switching to other system standards.
Office 365 still supports imap/smtp with plain authentication, but that 
will go away as well.
We currently use office 365 vi Exchange Web Services, with MS OAuth2.
It was a pain to implement…
There is some good stuff from Keisuke concerning OAuth2, but a lot more 
needs to be done in order to continue using IMAP.
SMTP will live a little longer, IMAP will force you to switch from palin 
authentication to bearer authentication where you send a token.
It sadly requires interaction by the user from time to time, no idea if 
Google has any system for Admin impersonation in place like MS Azure does.

I might release component in the near future that does MS OAuth against 
Azure.

As for Google and others, I will have to find the time to get into that.

Cheers
Alex
**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Gmail, LSA, and OAuth

2020-03-18 Thread Herr Alexander Heintz via 4D_Tech 
Am 18.03.2020 um 22:43 schrieb David Rose via 4D_Tech <4d_tech@lists.4d.com>:

> How is this done in 4D in conjunction with the 4D SMTP commands?

NOT
AT
ALL

we apologize for the inconvenience…

but in all seriousness:

Everybody is currently switching to other system standards.
Office 365 still supports imap/smtp with plain authentication, but that will go 
away as well.
We currently use office 365 vi Exchange Web Services, with MS OAuth2.
It was a pain to implement…
There is some good stuff from Keisuke concerning OAuth2, but a lot more needs 
to be done in order to continue using IMAP.
SMTP will live a little longer, IMAP will force you to switch from palin 
authentication to bearer authentication where you send a token.
It sadly requires interaction by the user from time to time, no idea if Google 
has any system for Admin impersonation in place like MS Azure does.

I might release component in the near future that does MS OAuth against Azure.

As for Google and others, I will have to find the time to get into that.

Cheers
Alex
**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Gmail, LSA, and OAuth

2020-03-18 Thread David Rose via 4D_Tech 
Google has announced that Less Secure Apps (LSA) will be turned off by Google 
in two stages:
1. June 15, 2020 - Users who try to connect from an LSA for the first time will 
no longer be able to do so. This includes third-party apps that allow 
password-only access to Google calendars, contacts, and email via protocols 
such as CalDAV, CardDAV and IMAP. Users who have connected to LSAs prior to 
this date will be able to continue using them until usage of all LSAs is turned 
off.
2. February 15, 2021 - Access to LSAs will be turned off for all G Suite 
accounts.

"If you are using an app that accesses your Google account with only a username 
and password, take one of the following actions to switch to a more secure 
method and continue to access your email, calendar, or contacts. If you do not 
take one of the following actions, when LSA access is discontinued after 
February 15, 2021, you will begin receiving an error message that your 
username-password combination is incorrect."

"If you are using [a third-party] email client, re-add your Google Account and 
configure it to use IMAP with OAuth."

How is this done in 4D in conjunction with the 4D SMTP commands?

David Rose


**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**