-
njsg
has anyone with a free Hotmail/live/... e-mail account got an announcement that Oauth2 would become mandatory? I haven't seen any, and I'm trying to understand if the Microsoft announcement that's now being mentioned here and there really applies to free (non-business) accounts too
-
njsg
("business" as in contracted by someone, whoever that is)
-
tomman
haven't heard that yet, but then I never use Outlook (or whatever name MS wants to rebrand it to tomorrow) directly via web
-
tomman
and they haven't sent messages to users either
-
njsg
all I know is some "business-tier" mail domains started requiring OAuth2, and there's possibly something else to track down in there, but Hotmail, about that I didn't get any notification, and password authentication is working
-
IrisZzz
support.microsoft.com/en-us/office/…5d65390-9676-4763-b41f-d7986499a90d "Modern Authentication Methods now needed to continue syncing Outlook Email in non-Microsoft email apps" says they sent messages to users who have been using "basic authentication" and will stop in September
-
frg_Away
as far as I know yes and if you try to add an app password it retunes not allowed for personal accounts.
-
njsg
problem is: "outlook" now (great naming decision there, Microsoft) is about everything they have that is a product or service or program about e-mail
-
njsg
OWA (webmail) now is Outlook, Hotmail (service and webmail) now is Outlook, Exchange (email hosting) might be named Outlook as well
-
njsg
and the e-mail client from Office probably didn't change name either, so it's Outlook too?
-
njsg
now this gets more important here, because it's possible some of this only applies to non-free accounts
-
frg_Away
create a new account in a different profile and try to set it up now.
-
tomman
oof
-
tomman
so basically I have 2 months to worry
-
tomman
thaaaaanks Microsoft for being a poor GOOG ripoff!
-
frg_Away
I didn't backport the latest TB changes and have no time to do so currently. So not sure if it will work.
-
njsg
aaaaaaaaaah it's buried in there.
-
njsg
or wait, they mean the clients? so doesn't clarify
-
njsg
frg_Away: hopefully I'll be able to check the Tb Oauth2 behavior today or this weekend
-
njsg
a question is: is login.microsoftonline.com also used for free accounts?
-
frg_Away
I don't know. Disable NoScript and uBlock and enable cookies during setup.
-
frg_Away
oauth2 s*cks. Opens a web page during connect.
-
njsg
I'm not sure I want to try this with my hotmail account, that one is happily using password auth, but the other one (Exchange) I'll try.
-
njsg
okay, tried setting up new account on different profile, and can reproduce
-
njsg
with hotmail, that is
-
njsg
the "sign-in options" only shows logging in to an org
-
njsg
... unless this is because I've logged in to an org - in the browser - with this profile...
-
njsg
no, same thing with a new profile.
-
njsg
also, only when I set server to outlook.office365.com, imap-mail.outlook.com does not trigger the OAuth2 window unless it has at some point been set to the other one. might be just because it's not on the list of known OAuth2 servers
-
njsg
might be a pile of stuff, and this is from manual testing so chances are I made a mistake
-
njsg
1. the endpoint might have to be
login.live.com/oauth20_authorize.srf instead of login.microsoftonline.com/common/oauth2/v2.0/authorize
-
njsg
2. the scope value needs to be what thunderbird now has, see
bugzilla.mozilla.org/1848370; this I think is part of the changes that changed the client id
-
njsg
3. the client ID needs to be the new client ID
-
njsg
4. it might need the redirect-uri to be adjusted (possibly http->https)
-
njsg
2, 3 and 4 will trigger error responses from the live.com endpoint. once it's fixed, I get a login prompt
-
njsg
this all from testing in the browser, not M&N
-
njsg
frg_Away: this still just for the Hotmail free account, I'll need to test the thunderbird versions to see how the Exchange one fares
-
frg_Away
we are missing
Bug 1685414
-
frg_Away
I have no timme currently in case it is needed sorry
-
njsg
2, 3 and 4 can probably be changed in the files, maybe even just omni.ja if I'm lucky
-
njsg
now 1... how can it tell the two kinds of account apart?
-
frg_Away
-
njsg
that'
-
njsg
that's possibly the problem, unless thunderbird does something else differently that allows free accounts
-
njsg
no, thunderbird somehow gets to the right login form, now what is the *address*...
-
njsg
*unless* microsoft allows both logins from login.microsoftonline.com and just rejects SM because of the client ID?
-
njsg
okay, it's *precisely* that.
-
njsg
if 2, 3 and 4 are as required for live.com, login.microsoftonline.com will do the redirect to login.live.com
-
njsg
(that's good, at least there's no need to deal with two different OAuth2 endpoints...
-
njsg
)
-
njsg
I couldn't confirm the address of the form in Thunderbird, but tested with the address in SeaMonkey
-
nsITobin
Good morning #SeaMonkey
-
frg_Away
Hi nsITobin installing VS2022 now
-
nsITobin
hope this is on a new vm cause build system will default to latest installed unless you know a magic configure var
-
nsITobin
the temp patch for the hash bs will get you to what I believe is
bug 1441651
-
nsITobin
tho i hate phrasing it like that cause that ain't why they did it it just happens to be up to snuff with what the latest msvc expects
-
nsITobin
also I wrote a C program last night and a basic build script
-
frg_Away
nsITobin new system disk cloned my VS2019 data disk.
-
Culex
I got super distracted in meatspace sorry i wasn't around much this afternoon frg