OAUTH Access Delegation

OAUTH Access Delegation

OAuth2 is an open standard [RFC 6749] for access delegation, commonly used as a way for Internet users to grant web sites or applications access to their information on other web sites but without giving them the passwords. That is, OAuth2 manages access authorization (delegation) not access authentication. Security is still handled by SSL/TLS.

See https://en.wikipedia.org/wiki/OAuth (the "Controversy" section is quite interesting)

However, the procedure required to acquire the password token is very complex and varies between the various implementors (Google, Microsoft, Yahoo, etc.). Rather than dealing with OAUTH2, consider using Two Factor Authentication with "app passwords".

OAUTH2 Tutorial

https://www.tutorialspoint.com/oauth2.0/

How OAuth2 works (GMail Example)

1. You must register your application program in the Google API Console.
2. When your application launches, it requests that the user grant access to data in their Google account.
3. If the user consents, your application requests and receives an "access token" to access the Gmail API.

For more details, see

If using SMTP, you must enable the OAUTH2 protocol as follows:

seeIntegerParam(0, SEE_AUTHENTICATE_PROTOCOL, AUTHENTICATE_XOAUTH2)

Once you have acquired the OAUTH2 access token from your token server, format it with seeMakeXOAuth2() or seeMakeXOAuth2N(), then pass the resultant string as the password.

Yahoo

In order to connect to the Yahoo server, see https://developer.yahoo.com/oauth2/guide/openid_connect/getting_started.html

Once the access token is received from Yahoo, follow the same procedure as above.

HOME PAGE
MARSHALLSOFT is a trademark of MarshallSoft Computing, Inc.