21–30 of 136 posts
Gmail and other huge centralized points of censorship and surveillance must be destroyed. If you are a user, move away. If you are a developer, do not support these closed systems.
I'm confused… Why do they want to support the OAUTH flow when they can just the normal app password flow without any change in their code, just documentation for their users. https://support.google.com/accounts/answer/185833?hl=en
Any takers for a bet on when Google will axe App Passwords?
I am wondering if it is really legal for Google to even ask any money from 3rd party developers to use GMAIL (what should be) open standards like SMTP and IMAP. I guess I am so naive...
By the looks of it Pegasus falls into this category and should not have any issues getting approved (still need the YT video and such but the Google team are surprisingly responsive and helpful in my experience).
> and has the ability to access data from or through a third party server So Pegasus Mail accesses your email from their servers? For reference, they have an entire flow designed so that the auth credentials never touch the app developer's server for desktop and mobile apps - https://developers.google.com/identity/protocols/oauth2/nati...
Most mail clients can connect to both a google email account and a "third party server" email account. It's easier to rule out undetectable-by-google data exfilteration if the app can only connect to Google. The obvious way around this is to make a Google-only edition. Yuck.
My unfounded guess is that just like the parent here, OP isn’t very knowledgeable about OAuth and chose the wrong flow.
- in terms of privacy, applications that have access to your Gmail inbox now require a security audit.
- the audit is not required for MVP (Of course, you have to pay for the audit. But:
- it’s only required when you ask for restricted user data (i.e. reading my emails).
- Google doesn’t take 30% of your revenue to use its API - which is free by the way.
To me, Google has created the perfect world for developers here. And that says a lot when I read the developer of Pegasus Mail doesn’t want to record a 2min long YouTube screencast to get approved.
Also, just wanted to kudos the Google OAuth team that has greatly improved their process in the past years. If you follow the guidelines, you can get approved within a day now.
Does anyone has a link for that ToC? I'm curious what kind of use cases that need such payment. E.g. if I want to make my app to use Google login, I think it's completely free?
I believe many comments here will criticize Google. But objectively, Google is at its best here: - in terms of privacy, applications that have access to your Gmail inbox now require a security audit. - the audit is not required for MVP ( Of course, you have to pay for the audit. But: - it’s only required when you ask for restricted user data (i.e. reading my emails). - Google doesn’t take 30% of your revenue to use i…