🐛 [firestore-send-email] Workaround for deprecation of Outlook/Hotmail app passwords

[lucaout83]

[READ] Step 1: Are you in the right place?

Maybe this should be moved to the "report a bug" section?

[REQUIRED] Step 2: Extension name

This feature request is for extension: firestore-send-email

What feature would you like to see?

I would like to know if there is a way for Outlook/Hotmail users to bypass Microsoft's deprecation of app passwords and keep using this Firebase extension.

Let me explain: I am using the firestore-send-email extension for a small app (150 users at the moment, but growing). When the user clicks on a specific button (to order a reward), the app creates a Firestore document in the right collection and an email is sent to the user (and to me) from an app-specific Outlook email account using SMTP. I configured the SMTP the way which was intended, ie with an app password ("To use your Outlook/Hotmail email account with this extension, you’ll need to have 2FA enabled on your account, and Create an App Password" as per the documentation)
These automatic emails are the way I found to keep track of the reward orders and to make sure I deal with each order within a reasonable amount of time.

On June 28th I received a Microsoft email stating that I may lose access to some of my third-party mail and calendar apps ("Microsoft will no longer support the use of third-party email and calendar apps which ask you to sign in with only your Microsoft Account username and password"). After a bit (lot) of research online, I figured out that the app passwords would most likely be affected and would be deprecated on Sept 16th, 2024:
https://techcommunity.microsoft.com/t5/outlook-blog/keeping-our-outlook-personal-email-users-safe-reinforcing-our/ba-p/4164184 - see comment by David Los on ‎Jun 11 2024 03:40 PM

The question I am asking is: how can I keep using this extension? With Microsoft deprecating the use of app passwords, do you plan on releasing an update with multi factor authentication or any other modern authentication method that doesn't use app passwords? Or am I screwed with my Outlook email account? Should I use another email provider ie gmail (although app passwords might be deprecated in the future also)?

By the way, I am also using the Firebase Authentication "email address verification" and "password reset" with the same Outlook SMTP settings (app password), so this will stop working too. Although I understand this is not the correct Github section, I would appreciate if you could point me to a solution for this problem as well.

How would you use it?

This feature would allow people like me using firestore-send-email with an outlook/hotmail account to keep using this extension like before.

[lucaout83]

I don't know if you guys are on holidays over there but it's been a month and still 0 reply... The matter is starting to be pressing: Sept 16th is just around the corner and I'd like some insight please.

[Rez92]

I have the same issue. Is there any planned implementation for OAuth 2 or should I use an other email provider ?