User Profile
manish1614
Brass Contributor
Joined 4 years ago
User Widgets
Recent Discussions
Authentication Failure for IMAP and POP3 using Client Credential flow for OAuth2.0 | Java
I am facing an authentication failure issue while trying to connect for both IMAP and POP3 protocols using the Client Credential Grant flow for OAuth2.0 Where, I have been following the steps suggested in "https://docs.microsoft.com/en-us/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth#get-an-access-token" I have been using this github project to fetch the Access Token using Client Credential Grant flow: https://github.com/Azure-Samples/ms-identity-msal-java-samples/tree/main/1.%20Server-Side%20Scenarios/msal-client-credential-secret Java Code for IMAP: public static void connectIMAP(String userEmail, String accessToken){ String SSL_FACTORY = "javax.net.ssl.SSLSocketFactory"; Properties props= new Properties(); props.put("mail.imap.ssl.enable", "true"); props.put("mail.imap.port", "993"); props.put("mail.imap.auth.mechanisms", "XOAUTH2"); props.put("mail.imap.sasl.mechanisms", "XOAUTH2"); props.put("mail.imap.auth.login.disable", "true"); props.put("mail.imap.auth.plain.disable", "true"); props.setProperty("mail.imap.socketFactory.class", SSL_FACTORY); props.setProperty("mail.imap.socketFactory.fallback", "false"); props.setProperty("mail.imap.socketFactory.port", "993"); props.setProperty("mail.imap.starttls.enable", "true"); props.put("mail.debug", "true"); props.put("mail.debug.auth", "true"); Session session = Session.getInstance(props); session.setDebug(true); try { final Store store = session.getStore("imap"); store.connect("outlook.office365.com",userEmail, accessToken); if(store.isConnected()){ System.out.println("Connection Established using imap protocol successfully !"); } } catch (NoSuchProviderException e) { // session.getStore() e.printStackTrace(); } catch (MessagingException e) { // store.connect() e.printStackTrace(); } } Java code for POP3: public static void connectPOP(String email, String accessToken){ Properties properties= new Properties(); properties.put("mail.pop3.port", 995); properties.put("mail.pop3.forgettopheaders", "true"); properties.put("mail.pop3.auth.mechanisms", "XOAUTH2"); properties.put("mail.pop3.auth.login.disable", "true"); // If true, prevents use of the USER and PASS commands. Default is false. properties.put("mail.pop3.auth.plain.disable", "true"); // If true, prevents use of the AUTH PLAIN command. Default is false. properties.put("mail.pop3.auth.xoauth2.disable","false"); // If true, prevents use of the AUTHENTICATE XOAUTH2 command. Hence set it to false properties.put("mail.pop3.auth.xoauth2.two.line.authentication.format", "true"); // If true, splits authentication command on two lines. Default is false. properties.put("mail.pop3.connectiontimeout", 15000); properties.put("mail.pop3.timeout", 15000); properties.put("mail.debug", "true"); Session session = Session.getInstance(properties); session.setDebug(true); try{ Store store = session.getStore("pop3"); store.connect("outlook.office365.com", email, accessToken); if(store.isConnected()){ System.out.println("Connected with pop3 successfully !"); } }catch(Exception e){ e.printStackTrace(); } } Following are the credentials which I have used while performing the Client Credential Grant flow userEmail:- Email of the user which is used to login to Azure portal (eg, email address removed for privacy reasons) authority=https://login.microsoftonline.com/<tenant - id - here>/ client_id= <client(application) - id - here> secret= <client - secret - key - here> scope= https://outlook.office.com/.default Note: I have been using the Default Active Directory, and the default user(Admin) for my Azure account. Is it fine this way ? or does it require a new custom Azure AD and a separate tenant for performing client credential flow Below Image contains list of permissions I have applied in my app: Error Logs: Following is the list of jars I have used as a part of this development: My Java Code Link(ideone): https://ideone.com/2RaWN9 Please help and let me know if the program is not correct. Or if any important step seems to be missing. Thank you.
