GMAIL Authentication

Posted on
Tue May 22, 2018 7:20 am
berkinet offline
User avatar
Posts: 3020
Joined: Nov 18, 2008
Location: Berkeley, CA, USA & Mougins, France

GMAIL Authentication

Setting up Better Email (BTW, thanks) using a GMAIL account and ran into this problem:

google automatically wrote:
Google just blocked someone from signing into your Google Account from an app that may put your account at risk.
Less secure app
...
...
Are you the one who tried signing in?
Google will continue to block sign-in attempts from the app you're using because it has known security problems or is out of date. You can continue to use this app by allowing access to less secure apps, but this may leave your account vulnerable.

I have searched this forum and didn't see any reference to this problem. For now I have allowed Better Email to use my account, but I was wondering if there is a better fix to this issue.
Last edited by berkinet on Tue May 22, 2018 10:13 am, edited 1 time in total.

Posted on
Tue May 22, 2018 10:05 am
RogueProeliator offline
User avatar
Posts: 1945
Joined: Nov 13, 2012
Location: Baton Rouge, LA

Re: GMAIL Authentication

It wouldn't surprise me if that was because the Python version in use isn't using the latest TLS standard -- similar to the GitHub updater issue but Google is allowing you to circumvent the restriction.

Adam

Posted on
Tue May 22, 2018 10:20 am
lanbrown offline
Posts: 329
Joined: Sep 26, 2017

Re: GMAIL Authentication

It may not be a TLS issue. According to Google, the mail app on iOS 6 and below is considered as less secure. iOS 5 introduced TLS 1.2 support. Google doesn't exactly say what it considers as less secure except for a few examples of mail clients. That doesn't mean it isn't a TLS 1.2 issue though.

To the OP, what version of macOS are you running?

Posted on
Tue May 22, 2018 10:27 am
FlyingDiver offline
Posts: 2287
Joined: Jun 07, 2014
Location: Cape Coral, FL

Re: GMAIL Authentication

This has nothing to do with TLS. It's because Google wants two factor authentication for logins. Or something like that.

I think there's a way to use app-specific passwords similar to iCloud. But I don't use Gmail with BetterEmail, so I don't know the details.

I know that there are users doing so, hopefully one of them will pop up with the answer.

joe (aka FlyingDiver)
my plugins: http://forums.indigodomo.com/viewforum.php?f=177

Posted on
Tue May 22, 2018 10:32 am
berkinet offline
User avatar
Posts: 3020
Joined: Nov 18, 2008
Location: Berkeley, CA, USA & Mougins, France

Re: GMAIL Authentication

lanbrown wrote:
...To the OP, what version of macOS are you running?

Probably moot information having read FlyingDiver's response. But anyway it is 10.13.4
Last edited by berkinet on Tue May 22, 2018 10:34 am, edited 1 time in total.

Posted on
Tue May 22, 2018 10:33 am
lanbrown offline
Posts: 329
Joined: Sep 26, 2017

Re: GMAIL Authentication

In High Sierra, Python uses LibreSSL which supports TLS 1.2. So it definitely is not a TLS issue.

Posted on
Tue May 22, 2018 10:44 am
berkinet offline
User avatar
Posts: 3020
Joined: Nov 18, 2008
Location: Berkeley, CA, USA & Mougins, France

Re: GMAIL Authentication

FlyingDiver wrote:
...I know that there are users doing so, hopefully one of them will pop up with the answer.

Well, according to google I have Visit your App passwords page. You may be asked to sign in to your Google Account.. I do that, and then immediately get
Screen Shot 2018-05-22 at 18.41.55.png
Screen Shot 2018-05-22 at 18.41.55.png (32.16 KiB) Viewed 339 times


I guess I'll just manage with my less secure app :D

Posted on
Tue May 22, 2018 11:15 am
RogueProeliator offline
User avatar
Posts: 1945
Joined: Nov 13, 2012
Location: Baton Rouge, LA

Re: GMAIL Authentication

FWIW, and for posterity, I was able to get time and actually do a bit of research in some of the developer docs -- looks like the main culprit are applications which are directly signing into Google and thus likely have your password stored. The two main workarounds are to either change the application to use OAuth for authentication OR enable 2-factor authentication and utilize the app-specific password. Obviously only the latter is a feasible solution from an end user perspective.

Berkinet - that App Passwords setting isn't available without 2-Factor Authentication enabled, perhaps that is not enabled on your account?

Posted on
Wed May 23, 2018 12:21 pm
FlyingDiver offline
Posts: 2287
Joined: Jun 07, 2014
Location: Cape Coral, FL

Re: GMAIL Authentication

Adam - Can you point me to the docs for OAuth? If it's doable from Python I could possibly add it to the plugin.

joe (aka FlyingDiver)
my plugins: http://forums.indigodomo.com/viewforum.php?f=177

Posted on
Wed May 23, 2018 10:50 pm
RogueProeliator offline
User avatar
Posts: 1945
Joined: Nov 13, 2012
Location: Baton Rouge, LA

Re: GMAIL Authentication

Adam - Can you point me to the docs for OAuth? If it's doable from Python I could possibly add it to the plugin.

I honestly wouldn't worry too much about it -- the App Password works fine with the plugin and users really should enable two factor authentication anyway (and thus have access to the application passwords)! :-) One caveat, I believe the OAuth applications that I have seen are using the JSON API...

But if you really are interested:
https://developers.google.com/gmail/api/auth/about-auth

Posted on
Sat Jun 02, 2018 6:53 pm
FlyingDiver offline
Posts: 2287
Joined: Jun 07, 2014
Location: Cape Coral, FL

Re: GMAIL Authentication

Decided I'm not interested in going down that road.

The answer seems to be to enable 2 Factor Authentication and then using app-specific passwords.

joe (aka FlyingDiver)
my plugins: http://forums.indigodomo.com/viewforum.php?f=177

Page 1 of 1

Who is online

Users browsing this forum: No registered users and 0 guests