Support Google IMAP OAUTH or Microsoft Graph API to fetch emails

[vladsf]

Google and Microsoft intend to stop support for password-based login to IMAP and POP
(https://www.bleepingcomputer.com/news/security/google-to-force-oauth-in-g-suite-to-increase-security/)

PHP IMAP extension is not supporting OAUTH tokens yet https://wiki.php.net/todo/ext/imap/xoauth2

I am creating this issue to discuss possible workarounds or future work to support mails server with IMAP OAUTH.

[glensc]

For Google I found that you can use app passwords (rather than account passwords):

• https://support.google.com/accounts/answer/185833?hl=en

[francescobianco]

Hi @glensc @vladsf in this post I'd propose solution with a trasparent replacement of PHP Imap with support for OAUTH. I hope it help in some way
ddeboer/imap#443 (comment)

[vladsf]

found interesting comment - https://www.php.net/manual/en/language.types.resource.php

'stream' is a general resource type and can have specific subtypes (imap, pop, curl ...). Casting from 'stream' to them makes sense alright.

E.g. Making OAUTH2 work for imap, but still use the normal imap_ functions. Just open a ssl:// stream to the IMAP server with stream_socket_client(), send the "AUTHENTICATE XOAUTH2 ..." authentication with valid token and then use the imap_ functions on the casted 'stream' to 'imap' resource.
Not being able to cast from 'stream' to 'imap' makes it necessary to use 3rd party solutions, like php-imap. Doesn't have to be necessary, if the cast would be possible.

[areis422]

Reference article from Microsoft:
https://learn.microsoft.com/en-us/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth

I'd also love to see this implemented!