These are chat archives for OfficeDev/ews-java-api

24th
Jan 2015
Victor Boctor
@vboctor
Jan 24 2015 18:20
EWS service in Office 365 supports OAuth providing the ability for an app to access your mailbox with seeing your password. However, it doesn't support fine grained consents so like the OData API which supports consents like read mail, send mail, calendar and contacts. Ews-java-api doesn't support OAUTH though.
I meant without seeing.
Mike Noordermeer
@MikeN123
Jan 24 2015 19:28
since there is no 'user consent' scenario for EWS, even with O365, I think it's fairly useless
if an admin needs to give full access, he can create a service account as well
Victor Boctor
@vboctor
Jan 24 2015 19:29
I think OAuth gives benefits like: 1. app doesn’t see password, 2. constrained access, 3. ability to revoke. Would EWS OAuth give you 1 and 3, but not 2?
It would be use for developers of services / applications requiring such access rather than admin.
Mike Noordermeer
@MikeN123
Jan 24 2015 19:36
EWS with application impersonation also gives you 1, and I'm not sure EWS OAuth gives you 3. on a per user basis
So essentially using OAuth with EWS instead of app impersonation is just swapping the (app specific) username/password for an OAuth token