LanX has asked for the wisdom of the Perl Monks concerning the following question:

Hi

I'm looking for a solution to regularly trigger a "forgot password" request at various sites for various users and check if the mail arrives.

I'm aware that this is not a script writing service, but I think it's in the common interest to find a monitoring solution for PM, ACT and Perlmongers's mailman

The script has to account for delays in delivery and for limitations/throttles for allowed requests per time frame.

Best guess anyone?

Email experts, please don't be shy. :)

Cheers Rolf
(addicted to the Perl Programming Language :)
see Wikisyntax for the Monastery

Replies are listed 'Best First'.
Re: Password email round-trip monitoring
by LanX (Saint) on Dec 28, 2024 at 02:27 UTC
    FWIW:
    • programmatically triggering a "Password Forgotten" request on PM is implemented.
    • pulling an email by sender name via Mail::IMAPClient works too with a "simple" email account
    The giant PITA here turns out to be Gmail, which requires some extra configuration plus an "App-Password" for untrusted clients. It seems this app-password is used instead of the real password (?) and that this mechanism is due to be deactivated from 2025 on (WTF?).

    So the only viable route seems to be to only poll one reliable email account and to forward from all others to this one.

    So the plan is:

    • Whenever the monitoring script runs it'll check via IMAP if the emails from the last run arrived.
    • Otherwise it will generate a report.
    • I think once per day is enough
    • Probably emailing it to the god's account.
    Comments?

    Cheers Rolf
    (addicted to the Perl Programming Language :)
    see Wikisyntax for the Monastery

      Update:

      Despite the SPAM-denial problems, I got automated roundtrip-testing working

      By forwarding the email from

      • @cpan.org which doesn't care about SPF (and is rumored to be replaced/abandoned)
      • to @gmail.com which tolerates forwards from cpan.org even if they look like spam ("soft-fail")
      • to @gmx.de (technical user) which still allows reading the emails with Perl and without 2-factor authentication.

      Takes a while, but works. Alas don't use the same @cpan.org email for multiple accounts!. This bug did cost me a day.

      Cheers Rolf
      (addicted to the Perl Programming Language :)
      see Wikisyntax for the Monastery