email - How to avoid access to a user's GMail inbox being counted as "hacking attempts" -


We want to give users of our (web based) private document management solution the possibility to import their documents Gmail addresses that have been sent as attachments.

Our current solution is to allow our users to store their login credentials in our web app, and then use the Gmail Inbox to access via IMAP only a security approach (We do not have to store login credentials, if possible), this sometimes (maybe when we vote often or many users ) For our app's login efforts blocked by Gmail leads us to the error message "[ALERT] Please log in through your web browser:" From the IMAP server and our user's report, he sees that Gmail has blocked some "potential hacking efforts" or similarity.

My main questions are:

  • Switching to OAuth for authentication (and to still check our user's inbox, only OAuth token Can I help with this situation using IMAP? I should know how to do this, I want to know if it will help in this situation.
  • Is there a guideline / quota / restriction on how often we should allow a user's inbox to vote (or how many connections do we open in Gmail in parallel?)? I can not find it on the developer docs on some Google developer site.
  • Is any other option than IMAP able to import into our app from the Gmail app?
  • Answer to your questions

    1. OAuth < The advantage of using / code> is that you are not directly accumulating the user's credentials. Therefore, you will redirect the user to the Google login page, where Google will authenticate the user and give you a token's access and refresh the token, then you can access the user's email using the access token and Google API. Refresh token is to recreate that access token.

    2. GSM supports IMAP4 protocol with idle to accept real-time notifications from Gmail servers when new email arrives ( You do not need Gmail every time you choose)


Comments