[Enhancement]: SMTP sunsetting

[amasterengineer]

Type of Enhancement

Server Backend

Describe the Feature/Enhancement

Many email providers are sunsetting basic authentication to include smtp. Will this application be updated to allow email notifications via moderen authentication, that outlook and Gmail will be supporting after fall 2024

Why would this be helpful?

Many email providers are sunsetting basic authentication to include smtp. Will this application be updated to allow email notifications via moderen authentication, that outlook and Gmail will be supporting after fall 2024

Future Implementation (Screenshot)

Many email providers are sunsetting basic authentication to include smtp. Will this application be updated to allow email notifications via moderen authentication, that outlook and Gmail will be supporting after fall 2024

Audiobookshelf Server Version

2.15.0

Current Implementation (Screenshot)

No response

[nichwall]

Where do you see that SMTP access is going away? The only thing I can find online is that Google removed using a plain username/password in 2022 and that you need to use an app password, which ABS supports.

To set up an app password for Google, you can reference their help article.
https://support.google.com/mail/answer/185833?hl=en

[amasterengineer]

Where do you see that SMTP access is going away? The only thing I can find online is that Google removed using a plain username/password in 2022 and that you need to use an app password, which ABS supports.

To set up an app password for Google, you can reference their help article. https://support.google.com/mail/answer/185833?hl=en

These are the two things I have found that lead me to understand it's being sunsetting

https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online

https://support.google.com/a/answer/14114704?hl=en#:~:text=Autumn%20of%202024%3A,legacy%20passwords%20(basic%20authentication).

[nichwall]

Ah, thanks for the links.

I'm not sure on the time table for implementing OAuth for emails. There is OAuth for authenticating users in ABS, but not sure if that is usable for authenticating for email or needs a completely separate system.

One thing to note is the Google article specifically says app passwords will still continue to work (but still not as good as OAuth).

[ponchohoncho]

A dedicated SMTP provider is a good idea. The free tiers of most SMTP providers should get you along just fine. smtp2go is my favorite. More reasons here: https://smtp.rodeo/

[devnoname120]

I agree with @ponchohoncho. Supporting each provider's convoluted auth flow is not worth it IMO. And it's a security risk as well because if your Audiobookshelf instance gets hacked then your email address will get impersonated.