Page MenuHomePhabricator

MediaWiki should support modern OAuth authentication for SMTP
Open, Needs TriagePublic

Description

MediaWiki appears to only support basic e-mail authentication for SMTP usage. This prevents MediaWiki sites from being able to easily use Exchange without requiring reduced security for the specified e-mail account. OAuth authentication as documented here: https://docs.microsoft.com/en-us/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth will allow MediaWiki to use modern authentication.

Event Timeline

Abmeltzer renamed this task from MediaWiki should support modern OAuth authentication for SMTP e-mail sending to MediaWiki should support modern OAuth authentication for SMTP.Aug 12 2020, 10:59 PM

Hello @Abmeltzer

MediaWiki can use the internal PHP mail() function or PEAR::Mail.

You could use a sendmail binary with both of those providers, with the binary interfacing with MTA in multiple ways.

The actual support should be at Net_SMTP, but I see it already supports XOAUTH2, so I think it should work. Note that the $wgSMTP parameters are passed directly to the Mail::factory(), so this should be just a matter of getting the appropriate OAUTH2 token, device authorization, etc. and filling $wgSMTP with the right parameters.

Interesting. I'll look into this. (I'm not super familiar with the PHP ecosystem so I didn't realize that this was an option for MW installations.) Thanks for the information.

There is certainly a lack of documentation. It would be appreciated if you can tell us the result of you setting this up. Or directly update https://www.mediawiki.org/wiki/Manual:$wgSMTP

@Aklapper I haven't had a chance to look into this yet. I'll report back once I have some time to work on this.