using mutt_oauth2.py

[Mathias M.]

On Sun, May 31, 2026 at 11:53:22AM -0400, Todd Zullinger wrote:
> Globe Trotter via Mutt-users wrote:
> > My workplace has moved to O365 with oauth2 and I was
> > trying to figure out how to get mutt to work. (They allow
> > evolution for linux users, but I want to see if I can get
> > away with continuing to use mutt.) The evolution setup for
> > O365 is not local to my workplace and the configuation
> > seems to accept tenant common and the usual application ID
> > (client ID). I am not sure what the client_secret is, or
> > where to find this. (I am able to log in through
> > evolution, and access my email.)
> 
> IIRC, the evolution developers make some attempt to obscure
> the client_secret in their code -- which is mostly an
> annoyance.
> 
> > So, I was looking into using mutt_oauth2.py.
> > 
> > I came across this post, got the gpg key in place of
> > YOUR_GPG_IDENTITY and tried to follow the instructions:
> > 
> > https://www.dcs.gla.ac.uk/~jacobd/posts/2022/03/configure-mutt-to-work-with-oauth-20/
> > 
> > (I put in the client ID, and for now left the
> > client_secret "" because I can not tell where this is
> > stored in evolution). Advice on this would be very helpful
> > too.
> 
> I think you do need both, but I've only set it up with Gmail
> so I can't be sure what Microsoft does or requires.
> 
> > Anyway, but at this poiint, I do not appear to even get
> > there:
> > 
> > I try:
> > 
> > $ python mutt_oauth2.py token.txt --authorize
> > Difficulty decrypting token file. Is your decryption agent
> > primed for non-interactive usage, or an appropriate
> > environment variable such as GPG_TTY set to allow
> > interactive agent usage from inside a pipe?
> > 
> > Where is this token file put in, in the script?
> 
> It's the argument you pass to the script.  So with the
> command you wrote above, it would be token.txt in the
> directory where you ran the command from.  Ideally, you
> should specify a full path to ensure things work regardless
> of the directory from which you run the script.
> 
> > Actually, is there any place with detailed instructions on
> > this?
> 
> Have you seen the thorough README file which is next to the
> mutt_oath2.py script in the mutt contrib directory?  That is
> a good place to start.  Being a workplace, I don't know if
> you can register a client id on your own or not, but it
> might be worth trying.
> 
> -- 
> Todd

Good point. In my employer's case, I had to use Thunderbird's client_id.
Which is:

9e5f94bc-e8a4-4e73-b8be-63364c29d753

Regards,
Mathias

-- 
Not all who own a harp are harpers.
		-- Marcus Terentius Varro
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://lists.mutt.org/pipermail/mutt-users/attachments/20260601/fe3e05bd/attachment-0001.sig>