Ian Collier wrote in <zdh4+qm3kqrjd...@cs.ox.ac.uk>: |On Thu, Apr 13, 2023 at 05:05:31PM -0400, Craig Gallek wrote: |> I've managed to get this to work with gmail: |> https://gitlab.com/muttmua/mutt/-/blob/master/contrib/mutt_oauth2.py.REA\ |> DME#L85 | |I have used the mutt_oauth2.py script to authenticate against an institu\ |tional |office365 account over IMAP (script is at URL above with .README removed). \ | I |changed exactly two things in the script: (a) the GPG identity, and (b): |'client_id': '9e5f94bc-e8a4-4e73-b8be-63364c29d753' |(that's nicked from a recent public version of Thunderbird, which I |guess is not strictly kosher but it does work as long as you remember |this when you see the authorisation message from Microsoft asking if |Mozilla should be allowed access to your email. The client secret is |the empty string for this id. It saves the faff of having to create |an app registration and it allows the 'common' endpoints to work rather |than needing your tenant ID).
I can confirm that this one works, both IMAP and SMTP are possible, tenant=common! However, they now forbid "devicecode" flow. "auth" works. ("redirect" not tried. And tThis is all my script thing.) Interestingly there is no refresh_token no more!! P.S.: "my thing", because i use that not the mutt contrib/ script for "my MUA" not mutt is https://git.sdaoden.eu/browse/s-toolbox.git/plain/oauth-helper.py ie curl -u moon:mars --basic -O https://git.sdaoden.eu/browse/s-toolbox.git/plain/oauth-helper.py and config file (-R) authorize_endpoint=https://login.microsoftonline.com/common/oauth2/v2.0/authorize devicecode_endpoint=https://login.microsoftonline.com/common/oauth2/v2.0/devicecode token_endpoint=https://login.microsoftonline.com/common/oauth2/v2.0/token redirect_uri=https://login.microsoftonline.com/common/oauth2/nativeclient tenant=common scope=https://outlook.office.com/IMAP.AccessAsUser.All https://outlook.office.com/POP.AccessAsUser.All https://outlook.office.com/SMTP.Send flow=auth access_token= client_id=9e5f94bc-e8a4-4e73-b8be-63364c29d753 login_hint=yourm...@outlook.com timeout= timestamp= --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt)