News for hackers. Stuff that matters.

A comment on Google will disable all but OAuth for IMAP, SMTP and POP starting Sept. 30. Parent comment

Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by nunez on Friday January 19, 2024 @08:42AM (#39055280)
The refresh token shouldn't expire.
[ Parent | on HN ]
Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by gerwim on Friday January 19, 2024 @09:19AM (#39055726)
Maybe not for Google, but it's not part of the OAuth spec. It's perfectly valid for refresh tokens to expire.
[ Parent | on HN ]
Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by nunez on Friday January 19, 2024 @03:26PM (#39060630)
Interesting. Many of the OAuth services I've used use non-expiring refresh tokens. Though I definitely agree; they should also have an expiry.
[ Parent | on HN ]