search

odoo / odoo

Odoo. Open Source Apps To Grow Your Business.
https://www.odoo.com
Other
37.41k stars 24.32k forks source link

with gmail for smtp... less secure apps warning #1810

Closed matecsaj closed 7 years ago

matecsaj commented 10 years ago

In general settings, when setting up an outgoing SMTP server if you use a gmail account then press the test button you, get the warning below in your gmail inbox.

In gmail after you change to the less secure option, then Odoo's outgoing mail server test will succeed, but this doesn't seem like an ideal solution. I don't want to risk getting my gmail account hacked while using the less secure option.

Running 7.0 nightly build on a Ubuntu server.

Hi John,

We recently blocked a sign-in attempt to your Google Account [matecsaj@gmail.com].

Sign in attempt details Date & Time: Saturday, August 16, 2014 6:02:05 PM UTC Location: Port Dover, ON, Canada

If this wasn't you Please review your Account Activity page at https://security.google.com/settings/security/activity to see if anything looks suspicious. Whoever tried to sign in to your account knows your password; we recommend that you change it right away.

If this was you You can switch to an app made by Google such as Gmail to access your account (recommended) or change your settings at https://www.google.com/settings/security/lesssecureapps so that your account is no longer protected by modern security standards.

To learn more, see https://support.google.com/accounts/answer/6009563.

Sincerely, The Google Accounts team
This email can't receive replies. For more information, visit the Google Accounts Help Center.

Yenthe666 commented 7 years ago

Hi @matecsaj,

Thank you for your report. This is however the desired behaviour and we know this is the case. If you change the settings of your account it'll work this way. @JKE-be perhaps it might be time to change this behaviour to OAUTH2.0 or something in the upcoming V11 though? Closing as this is the desired behaviour.

Regards, Yenthe

martinblonk commented 5 years ago

Hi, when will a more secure version of OAUTH be implemented In Odoo so I can use gmail as imap server?

eLBati commented 5 years ago

@martinblonk you can use gmail just allowing less secure apps in your google account settings

Yenthe666 commented 5 years ago

@eLBati I think @martinblonk is trying to point out that he doesn't find the 'allowing less secure apps' in Odoo very safe.

martinblonk commented 5 years ago

Indeed @Yenthe666 , that's what I mean. I do not want to give less secure apps access to my gmail account.

eLBati commented 4 years ago

Hi all, please note the announcement from Google:

Starting February 15, 2021, G Suite accounts will only allow access to apps using OAuth. Password-based access will no longer be supported [...] June 15, 2020 - Users who try to connect to an LSA for the first time will no longer be able to do so. This includes third-party apps that allow password-only access to Google calendars, contacts, and email via protocols such as CalDAV, CardDAV and IMAP. Users who have connected to LSAs prior to this date will be able to continue using them until usage of all LSAs is turned off. February 15, 2021 - Access to LSAs will be turned off for all G Suite accounts [...] To maintain compatibility with G Suite accounts, update your app to use OAuth 2.0 as a connection method. To get started, follow our developer guide on using OAuth 2.0 to access Google APIs. You can also refer to our guide on OAuth 2.0 for mobile & desktop apps

Yenthe666 commented 4 years ago

Hmm, maybe we should reopen this and get this checked by the Odoo guys?