Hi all

Does LS support OAuth for email settings?


We're using Gsuite to manage LS emails but in future Gsuite will only permit app access via OAuth.

This seems like a good thing in the long run so keen to understand if this is a current or planned feature in LS. Noting that this kind of authentication with keys seems increasingly common, eg in Wordpress plugins etc.

Indispirit wrote: We're using Gsuite to manage LS emails but in future Gsuite will only permit app access via OAuth.

The change to OAuth only on Google's end would have what kind of impact on LimeSurvey? How is LimeSurvey currently accessing Gsuite?

LS currently accesses Gsuite by providing the login details to your Gsuite account in LS global email settings. Gsuite classifies applications that do this as 'LSAs' - Less Secure Applications and to allow LS to access Gsuite this way currently, you have to provide an extra permission.

In future, Gsuite will only use Oauth, whereby instead of using your login details, Gsuite will generate a key specific to your LimeSurvey instance. Some other email providers/ISPs already do this, for example Yahoo is appkey only, not sure if it's Oauth though. I'd expect this to become more widespread in future so won't just be a Gsuite issue.

(some more details here: blog.gisspan.com/2017/02/Implementing-OA...ogin-as-example.html )

Indispirit wrote: LS currently accesses Gsuite by providing the login details to your Gsuite account in LS global email settings.

Thanks, just to make sure it's only about E-Mails.

The plan by Google is the following.

Access to LSAs will be turned off in two stages:

1. June 15, 2020 - Users who try to connect to an LSA for the first time will no longer be able to do so. This includes third-party apps that allow password-only access to Google calendars, contacts, and email via protocols such as CalDAV, CardDAV and IMAP. Users who have connected to LSAs prior to this date will be able to continue using them until usage of all LSAs is turned off.
2. February 15, 2021 - Access to LSAs will be turned off for all G Suite accounts.

I recommend to open a feature request via bugtracker.

Submitted, thanks Jelo

Fine. If others want to comment or support the feature request, follow this link:
bugs.limesurvey.org/view.php?id=15664

Currently , more hard (in 3.X), but still can be done vioa plugin

But for 4.X

1. LimeMailer extend clearly PHPMailer
2. PHPMailer is already OAuth capable
3. A plugin can update LimeMailer : github.com/LimeSurvey/LimeSurvey/blob/3c.../LimeMailer.php#L495

Then : OAuth can be added via plugin in 4.X, and when plugin is readyu and tested : maybe it can be in core.

Yes, given the timeframes certainly seems most worthwhile for 4.x

With 3.X : you need gitlab.com/SondagesPro/mailing/eventBeforeTokenEmailExtended
Best is to fork this one to allow OAuth