OAuth Authentication for Gmail IMAP and SMTP

Google added an ability to authenticate to Google Mail IMAP and SMTP with OAuth using a SASL mechanism called “XOAUTH”. "In addition to making it easier for users to export their data, we also enable them to authorize 3rd-party apps and websites to access their data at Google. While it’s possible for a user to […]

Google added an ability to authenticate to Google Mail IMAP and SMTP with OAuth using a SASL mechanism called “XOAUTH”. "In addition to making it easier for users to export their data, we also enable them to authorize 3rd-party apps and websites to access their data at Google. While it’s possible for a user to authorize this access by disclosing their Google Account password to 3rd-party app, it’s more secure for app developer to use industry standard protocol called OAuth which enables user to give their consent for specific access without sharing their password," explains Google. To get started with XOAUTH, check out Gmail site on Google Code Labs, which has documentation, a tutorial, and sample code. In addition, Google has begun working with other companies like Yahoo and Mozilla on a formal Internet standard for using OAuth with IMAP/SMTP (learn more at OAuth for IMAP mailing list). One of the first companies using this feature is Syphir, in their SmartPush app for iPhone, as shown in the screenshots:

[Source]