search

tarickb / sasl-xoauth2

SASL plugin for XOAUTH2
Other
72 stars 20 forks source link

`sasl-xoauth2-tool get-token` requires password, breaks some outlook token requests #64

Open jrollins opened 1 year ago

jrollins commented 1 year ago

Not all outlook token requests require a password, and in fact some will break (401 error) if a password is provided.

The recent commit to fix issue #62 modified sasl-xoauth2-tool to require a password for the get-token command, and always sends it in the initial token requests. This breaks the request for users who don't require it.

I believe I can prepare an MR to fix the issue.

tarickb commented 1 year ago

Can you elaborate a little on when the client secret is required? Microsoft's docs are a little confusing on this point.

tarickb commented 11 months ago

If you're still having trouble with this issue, please try the device-flow option in sasl-xoauth 0.23. Full instructions are in the README but basically you need to enable "Allow public client flows" for your app registration (in the Azure console), and pass --use-device-flow to sasl-xoauth2-tool.