STARTTLS management for SMTP configuration

[julien bittard]

Hi,

Is it planned in the roadmap to be able to configure an SMTP server with STARTTLS?
Same for OAUTH 2 authentication? is this planned?

Thank You.

Julien

[Alessandro Vernet]

Hi Julien,

Regarding STARTTLS, my understanding is that compared to plain TLS, it allows a fallback to plain text communication in case the server doesn't support TLS. This, in general, is not a situation that should happen in the context of Orbeon Forms, as you would configure it to talk to a server that supports TLS. You'll let me know if I missed something.

Regarding OAuth 2.0 support for SMTP, I can see how valuable this could be if you would like to send emails on behalf of a user, and you know that the user's SMTP server supports OAuth 2.0. Is this what you had in mind? If so, currently this is not on our roadmap, but it might be something that isn't too hard to implement, see `EmailProcessor.scala`.

-Alex

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to orbeon+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/c4554a3e-d0ff-456f-8be0-e7f47abc3b74n%40googlegroups.com.

[Bittard, Julien]

Hi Alex,

 

STARTTLS mode and OAUTH 2 authentication are becoming more and more mandatory to connect to an SMTP server.

For example, the one offered by Office 365.

This is why it can become interesting to offer it in the ORBEON mail sending management.

 

Thanks

 

Julien

 

De : 'Alessandro Vernet' via Orbeon Forms <orb...@googlegroups.com>
Envoyé : mercredi 5 avril 2023 00:06
À : orb...@googlegroups.com
Objet : Re: [orbeon] STARTTLS management for SMTP configuration

 

EXTERNAL SENDER: Do not click any links or open any attachments unless you trust the sender and know the content is safe. EXPÉDITEUR EXTERNE: Ne cliquez sur aucun lien et n’ouvrez aucune pièce jointe à moins qu’ils ne proviennent d’un expéditeur fiable, ou que vous ayez l'assurance que le contenu provient d'une source sûre.

 

To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/CANrzKkndv_cnGSMOoaCQ9K5xxR%2BEM2zCnimrAvE2OUVbngBK4Q%40mail.gmail.com.

[Alessandro Vernet]

Hi Julien,

Got it, and indeed supporting those standards would make a lot of sense. If you get a chance, I would recommend you have a look at `EmailProcessor.scala`; the code dealing with sending out emails should be pretty straightforward, and only deals with standard APIs, so adding support for STARTTLS and OAuth 2.0 is hopefully not a large task. And if you get this working, and are willing to share your changes with us, we can put this into the product.

-Alex

To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/a8c238e070914d459ebd16b7587c6bbd%40cgi.com.

[Bittard, Julien]

Hi Alex,

 

I don't know SCALA, we mainly develop in java. I know it looks like, but I don't think I'm able to implement such functionality.

For the starttls, in fact, the emailProcessor already manages it when you indicate that you want to activate the TLS, this property is then valued:

             properties.setProperty("mail.smtp.starttls.enable", "true")

 

There is therefore "only" the OAUTH 2 to be implemented. J

 

Thanks

 

Julien

 

 

De : 'Alessandro Vernet' via Orbeon Forms <orb...@googlegroups.com>
Envoyé : mercredi 12 avril 2023 22:12

To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/CANrzKknKodrpZuscRB1GJQsjJAxLY_Ujusg8MBTS5GN0pWhjbQ%40mail.gmail.com.

[Alessandro Vernet]

Hi Julien,

Got it. I've started to read some documentation, and it is more involved than I thought it would ;). Which means that it most likely won't get done unless a customer sponsors this.

Out of curiosity, are you interested in OAuth 2.0 so end users can grant the right to Orbeon Forms to send emails on their behalf (i.e. going through a Google screen for that purpose), or for server-to-server interaction using service accounts, to allow Orbeon Forms access a user's Gmail account within your organization's Google Workspace domain and send emails on their behalf through the Gmail SMTP server?

-Alex

To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/4f59acf4897c48f5a683fe2152892b67%40cgi.com.