Browser Login with Google Apps

[Drumbasher]

Hello all,

I am trying to add my Google Apps email account to Aqua Mail Pro on an Android phone. The Google Apps email account is hosted by the college I go to. I can add the Google account to my phone very easily, but I want to access it using Aqua Mail instead of the Gmail app. When adding the Google account to my phone, I simply enter username/password, but then I have to touch the menu button so it allows me to use browser login. Once I do this, the portal page for my school pops up, and I have to enter the info again. It then logs in and the account is added. When adding this account in Aqua Mail, using the correct Google server settings, it always fails to verify. I know it is because it isn't logging into the school portal. Is there anyway to use browser login with Aqua Mail?

[Rachel Ambler]

Don't think it's a Google Apps issue since that's what I'm using at home, along with two factor authentication.

Is your college using standard security or do they have two factor turned on as well?

Sent from my SCH-I535 using Tapatalk

[Drumbasher]

I'm assuming the school is using two factor, but I'm not sure. I do know that if I access my mail on the computer, it opens another portal page to enter my credentials. The credentials on this page don't use my complete email address, just the portion before @abc.xyz.com, and my password. I then have to click a button that states the service is provided by Google Apps.

Sent from my Galaxy Nexus using Tapatalk 2

[Kostya Vasilyev]

Sounds like browser-based OAUTH maybe... Sorry, AquaMail only supports basic IMAP username / password authentication.

However... Since you know the password, why not try it?

Just use Manual account setup mode, and use these server settings:

imap.gmail.com, SSL, port 993
smtp.gmail.com, SSL, port 465

You will want to enter your whole email (abc@xyz.com) on the initial account setup screen, so it's carried by the app onto the incoming / outgoing server settings screens as the actual login.

[Drumbasher]

Thanks for the reply. I have already tried those settings. I still get a message saying the credentials are invalid. I have tried everything I can think of. I know the culprit is the second login step that is messing things up.

Sent from my Galaxy Nexus using Tapatalk

[Drumbasher]

I believe you are correct about the web-based OAUTH. According to my research, the client has to request a token from the Google Authorization server before it will give the client access to the Google api. Makes sense then why I can add the account to the Gmail app. Any thought of incorporating this into Aqua Mail?

Sent from my Galaxy Nexus using Tapatalk

[Kostya Vasilyev]

Um, not any time soon, sorry.

Have you tried using a regular username / password login, with Gmail's IMAP / SMTP servers?

Unless your network admins did something weird... this worked for every other Google Apps user so far.

[wolf]

I need XOAUTH2 too! Would make your app outstanding.

Shouldn't be that hard to implement:

developers.google.com/gmail/xoauth2_libraries
developers.google.com/accounts/docs/OAuth2InstalledApp

msdn.microsoft.com/en-us/library/live/dn440163.aspx

[Kostya Vasilyev]

Yeah, there is a library for everything these days

I've already tried OAUTH for my personal @gmail account, and could not make it work... Then found info on the 'net that it's only supported for hosted Google Apps.

But then -- are you sure your account doesn't support regular IMAP authentication schemes? My code has support for the default USER command, as well as SASL PLAIN, and since recently (dev. builds) also SASL CRAM-MD5.

SMTP supports SASL LOGIN, SASL PLAIN and SASL CRAM-MD5.

Is none of those supported by your mail server(s)? Really? Can you find out for sure?

[kerran]

The open source app SMS Backup+ does XOAUTH2 and works with any Gmail account. Have a look:
github.com/jberkel/sms-backup-plus
github.com/jberkel/sms-backup-plus/tree/master/src/com/zegoggles/smssync/auth

Would be such a great feature not having to trust your app with my password. On top "application-specific passwords" are an awkward alternative effectively circumventing 2-factor-auth and I'm pretty sure Google will kill them sooner or later.

[Kostya Vasilyev]

Well, it hasn't killed them yet...

Using a mail app written by someone else implies a certain level of trust anyway... Such as, does the developer work for the NSA or the FSB or the Chinese mafia?

Thanks for the SMS Backup+ links - I'll take a look.