Microsoft Mail Authentication

joel

As Microsoft is no longer supporting basic auth, all my emails, incoming and outgoing stopped working…

I was authenticated with a App Password, but its no longer working.

Any idea?

wrongecho

Hello,

OAuth support is currently on the to-do list.

https://forum.itflow.org/d/151-imap-support-o365-oauthmodern-auth/

joel

Thanks,

Is there an ETA already for that?

wrongecho

joel

Not currently unfortunately. We need to use a different PHP IMAP library as the standard one has had an open OAuth feature request for the best part of a decade.

There is a workaround in that thread around using a OAuth proxy, but it's not something I've tried myself.

joel

Ok, thanks

aftechro

i think i got somewhere with this, but still needs some improvements so feel free to go from here.

you will need your microsoft credentials (email and/or password/app password) clinet id and secret id

test them with below code, and works fine.

we can do like if_microsoft selected show below code where user can input their credentials and clientd/secret ids

Here my code:

index.php
<?php

// Function to delete credentials

function deleteCredentials($conn, $id) {

$sql = "DELETE FROM credentials WHERE id = $id";

if ($conn->query($sql) === TRUE) {

return true;

} else {

return false;

}

}

// Database connection

$servername = "localhost";

$username = "username";

$password = "password";

$dbname = "db_name";

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {

die("Connection failed: " . $conn->connect_error);

}

// Check if form is submitted

if ($_SERVER["REQUEST_METHOD"] == "POST") {

// Delete credential if delete button is clicked

if (isset($_POST['delete'])) {

$deleteId = $_POST['delete'];

if (deleteCredentials($conn, $deleteId)) {

$success_message = "Credential deleted successfully!";

} else {

$error_message = "Error deleting credential.";

}

}

// Collect form data for saving credentials

else {

$oauthName = $_POST['oauth_name'];

$clientId = $_POST['client_id'];

$clientSecret = $_POST['client_secret'];

// Save credentials to database

$sql = "INSERT INTO credentials (oauth_name, client_id, client_secret)

VALUES ('$oauthName', '$clientId', '$clientSecret')";

if ($conn->query($sql) === TRUE) {

$success_message = "OAuth 2.0 credentials saved successfully!";

} else {

$error_message = "Error saving credentials.";

}

}

}

// Retrieve credentials from database

$sql = "SELECT * FROM credentials";

$result = $conn->query($sql);

?>

<!DOCTYPE html>

<html lang="en">

<head>

<meta charset="UTF-8">

<meta name="viewport" content="width=device-width, initial-scale=1.0">

<title>Office 365 OAuth 2.0 Setup</title>

<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/5.1.0/css/bootstrap.min.css">

</head>

<body>

<div class="container mt-5">

<h1 class="mb-4">Office 365 OAuth 2.0 Setup</h1>



<div class="mb-5">

<h2>OAuth 2.0 Credentials</h2>

<form method="post">

<div class="mb-3">

<label for="oauth_name" class="form-label">OAuth Name</label>

<input type="text" class="form-control" id="oauth_name" name="oauth_name">

</div>

<div class="mb-3">

<label for="client_id" class="form-label">Client ID</label>

<input type="text" class="form-control" id="client_id" name="client_id">

</div>

<div class="mb-3">

<label for="client_secret" class="form-label">Client Secret</label>

<input type="text" class="form-control" id="client_secret" name="client_secret">

</div>

<button type="submit" class="btn btn-primary">Save OAuth Credentials</button>

</form>

</div>

<?php if (isset($success_message)) : ?>

<div class="alert alert-success" role="alert">

<?php echo $success_message; ?>

</div>

<?php endif; ?>

<?php if (isset($error_message)) : ?>

<div class="alert alert-danger" role="alert">

<?php echo $error_message; ?>

</div>

<?php endif; ?>

<?php if ($result->num_rows > 0) : ?>



<div class="mb-5">

<h2>Saved OAuth 2.0 Credentials</h2>

<table class="table">

<thead>

<tr>

<th>#</th>

<th>OAuth Name</th>

<th>Client ID</th>

<th>Client Secret</th>

<th>Actions</th>

</tr>

</thead>

<tbody>

<?php while ($row = $result->fetch_assoc()) : ?>

<tr>

<td><?php echo $row['id']; ?></td>

<td><?php echo $row['oauth_name']; ?></td>

<td><?php echo str_repeat("*", strlen($row['client_id'])); ?></td>

<td><?php echo str_repeat("*", strlen($row['client_secret'])); ?></td>

<td>

<form method="post">

<input type="hidden" name="delete" value="<?php echo $row['id']; ?>">

<button type="submit" class="btn btn-sm btn-danger">Delete</button>

</form>

</td>

</tr>

<?php endwhile; ?>

</tbody>

</table>

</div>



<div>

<hr>

<h2 class="mt-4">Test Email with Saved Credentials</h2>

<form method="post" action="send_email.php">

<div class="mb-3">

<label for="credentials_id" class="form-label">Select OAuth Credentials</label>

<select class="form-select" id="credentials_id" name="credentials_id" required>

<option value="">Select OAuth Credentials</option>

<?php

$result->data_seek(0); // Reset result set to the beginning

while ($row = $result->fetch_assoc()) {

echo '<option value="' . $row['id'] . '">' . $row['oauth_name'] . '</option>';

}

?>

</select>

</div>

<div class="mb-3">

<label for="test_email" class="form-label">Test Email Address</label>

<input type="email" class="form-control" id="test_email" name="test_email" required>

</div>

<button type="submit" class="btn btn-primary">Send Test Email</button>

</form>

</div>

<?php endif; ?>

</div>

<script src="https://stackpath.bootstrapcdn.com/bootstrap/5.1.0/js/bootstrap.bundle.min.js"></script>

</body>

</html>

and here send_mail.php

<?php

use PHPMailer\PHPMailer\PHPMailer;

use PHPMailer\PHPMailer\SMTP;

use PHPMailer\PHPMailer\Exception;

require 'vendor/autoload.php'; // Adjust the path to PHPMailer autoload.php

// Preconfigured Office 365 SMTP details

$smtpHost = 'smtp.office365.com';

$smtpUsername = 'your email'; // Replace with your Office 365 email address

$smtpPassword = 'your app password'; // Replace with your Office 365 app password

// Check if form is submitted

if ($_SERVER["REQUEST_METHOD"] == "POST") {

// Collect form data

$credentialsId = $_POST['credentials_id'];

$testEmail = $_POST['test_email'];

// Database connection

$servername = "localhost";

$username = "username";

$password = "password";

$dbname = "db_name";

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {

die("Connection failed: " . $conn->connect_error);

}

// Retrieve credentials from database

$sql = "SELECT * FROM credentials WHERE id = $credentialsId";

$result = $conn->query($sql);

if ($result->num_rows > 0) {

$row = $result->fetch_assoc();

$clientId = $row['client_id'];

$clientSecret = $row['client_secret'];

// $refreshToken = $row['refresh_token'];

// Send test email using preconfigured Office 365 SMTP details

$mail = new PHPMailer(true);

try {

// Server settings

$mail->SMTPDebug = SMTP::DEBUG_OFF; // Enable verbose debug output

$mail->isSMTP();

$mail->Host = $smtpHost;

$mail->SMTPAuth = true;

$mail->Username = $smtpUsername;

$mail->Password = $smtpPassword;

$mail->SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS;

$mail->Port = 587;

// Recipients

$mail->setFrom($smtpUsername, 'Sender Name');

$mail->addAddress($testEmail, 'Recipient Name');

// Content

$mail->isHTML(true);

$mail->Subject = 'Test Email Subject';

$mail->Body = 'This is a test email sent using OAuth 2.0 and SMTP authentication.';

$mail->send();

echo '<div class="alert alert-success" role="alert">Test email sent successfully!</div>';

} catch (Exception $e) {

echo '<div class="alert alert-danger" role="alert">Test email could not be sent. Error: ' . $mail->ErrorInfo . '</div>';

}

} else {

echo "Credentials not found.";

}

// Close database connection

$conn->close();

}

?>

joel

Thanks,

where should i put this code?

aftechro

joel ohh, this should be developed and integrated with itflow. i only done the test of oauth2.0 using client and secret id, to see if works with phpmailer which is used in itflow. so having this to go from, can be integrated with itflow. something that the other webdevs can do on their time. i'm not sure when or if i'll have time to do this, that's why i shared it here, so others can give it a try.

joel

aftechro gotcha, thanks

athornfam2

Thanks for this. It would honestly be nice to integrate ITflow with Oauth as I'm using a freebie SMTP vendor.

smileglobal

Hi all,

Check out SMTP2GO as a workaround until OAuth is ready. While we aren't using it for ITFlow currently, we are using it for alerts for our clients and it works pretty well. We just recently had to upgrade from the free plan as we surpassed the 1,000 emails per month limit, but the first paid tier is cheap…$10/mo for up to 10k emails.

$15/mo for 40k emails/mo

$75/mo for 100k emails/mo

You get the picture…

SMTP2GO - SMTP Service Pricing & Signup

joel

smileglobal

Im having issues sending out emails from ITFlow when using this or Sendgrid

johnny

@smileglobal thanks for the suggestion, anyone looking for a self hosted Mail solution check out Stalwart Mail

https://stalw.art/

I recommend runnung it on a reputable IP for example Datacenter Colos etc

smileglobal

joel what kind of issues? Any particular error messages?