[GH-ISSUE #5775] [feature]: Support for SMTP OAuth2 (XOAUTH2) for Microsoft 365 SMTP #2257

New issue

Open

opened 2026-03-16 23:45:54 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 23:45:54 +03:00

Owner

Originally created by @myeongkil on GitHub (Jan 16, 2026).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/5775

Is there an existing issue for this?

I have searched the existing issues

Summary

Related to #4401 #5251
Hoppscotch only supports password-based SMTP today, which prevents integration with providers requiring OAuth2/XOAUTH2

Why should this be worked on?

Current Limitation

At the moment, Hoppscotch only supports password-based custom SMTP authentication.

This design assumes:

Static username/password credentials
Traditional SMTP AUTH mechanisms (LOGIN / PLAIN)
No token lifecycle management

This approach works with legacy SMTP providers or local testing tools (MailCatcher, Mailpit),
but it cannot be used with modern enterprise mail providers.
ref. Microsoft 365 (Exchange Online) has deprecated and disabled SMTP Basic Authentication.

SMTP access now requires OAuth2 (XOAUTH2) with access tokens, not passwords.

Originally created by @myeongkil on GitHub (Jan 16, 2026). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/5775 ### Is there an existing issue for this? - [x] I have searched the existing issues ### Summary Related to #4401 #5251 Hoppscotch only supports password-based SMTP today, which prevents integration with providers requiring OAuth2/XOAUTH2 ### Why should this be worked on? ### Current Limitation At the moment, Hoppscotch only supports **password-based custom SMTP authentication**. This design assumes: - Static username/password credentials - Traditional SMTP AUTH mechanisms (LOGIN / PLAIN) - No token lifecycle management This approach works with legacy SMTP providers or local testing tools (MailCatcher, Mailpit), but it **cannot be used with modern enterprise mail providers**. ref. Microsoft 365 (Exchange Online) has deprecated and disabled SMTP Basic Authentication. SMTP access now requires **OAuth2 (XOAUTH2)** with access tokens, not passwords.