需要使用 php mailer 从 gmail 发送邮件而不启用“不太安全的应用程序”并生成“应用程序密码”

Question

我正在尝试使用 php mailer 从我的 gmail 帐户发送邮件。

我知道为了使用 php mailer 发送邮件，我们需要从我们的 gmail 帐户设置中启用“不太安全的应用程序”。

还有一个选项是不启用“不太安全的应用”，我们可以使用“APP密码”，通过启用两步验证从不太安全的应用发送邮件。

但问题是使用“APP密码”，我无法从php mailer发送邮件收到用户名和密码不被接受的错误。

我搜索并发现，我们无法使用“APP密码”从安全性较低的应用程序发送邮件。从这个链接找到https://support.google.com/accounts/answer/185833?hl=en&authuser=5

我正在使用以下 php 邮件程序代码发送邮件：

<?php
// Import PHPMailer classes into the global namespace
// These must be at the top of your script, not inside a function
use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\Exception;
// Load Composer's autoloader
require 'vendor/autoload.php';
// Instantiation and passing `true` enables exceptions
$mail = new PHPMailer(true);
try {
//Server settings
$mail->SMTPDebug = 2;                                       // Enable       verbose debug output
$mail->isSMTP();                                            // Set mailer to use SMTP
$mail->Host       = 'ssl://smtp.gmail.com';                 // Specify main and backup SMTP servers
$mail->SMTPAuth   = true;                                   // Enable SMTP authentication
$mail->Username   = username;
$mail->Password   = password;
$mail->SMTPSecure = 'ssl';                                  // Enable TLS encryption, `ssl` also accepted
$mail->Port       = 465;
//Recipients
$mail->setFrom('test@gmail.com', 'Test');
$mail->addAddress('test1@gmail.com', 'Test1');     // Add a recipient
$mail->addAddress('test2@gmail.com');               // Name is optional
$mail->addReplyTo('test@gmail.com', 'Test');
// Content
$mail->isHTML(true);                                  // Set email format to HTML
$mail->Subject = 'Here is the subject';
$mail->Body    = 'This is the HTML message body <b>in bold!</b>';
$mail->AltBody = 'This is the body in plain text for non-HTML mail clients';
$mail->send();
echo 'Message has been sent';
} catch (Exception $e) {
echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}";
}

使用“APP密码”时出现以下错误信息。

2019-09-04 07:24:15 CLIENT -> SERVER: EHLO localhost
2019-09-04 07:24:15 CLIENT -> SERVER: AUTH LOGIN
2019-09-04 07:24:16 CLIENT -> SERVER: <credentials hidden>
2019-09-04 07:24:16 CLIENT -> SERVER: <credentials hidden>
2019-09-04 07:24:16 SMTP ERROR: Password command failed: 535-5.7.8 Username and Password not accepted. Learn more at535 5.7.8 https://support.google.com/mail/?p=BadCredentials z12sm8871955pfj.41 - gsmtp
SMTP Error: Could not authenticate.
2019-09-04 07:24:16 CLIENT -> SERVER: QUIT
SMTP Error: Could not authenticate.
Message could not be sent. Mailer Error: SMTP Error: Could not authenticate.

请给出一个解决方案，在不启用“不太安全的应用程序”和使用gmail“APP密码”的情况下发送邮件

我还使用了第三个选项 - XOAUTH2 身份验证来发送邮件。以下是我的代码：

    <?php
    /**
     * This example shows how to send via Google's Gmail servers using XOAUTH2 authentication.
     */
    //Import PHPMailer classes into the global namespace
    use PHPMailer\PHPMailer\PHPMailer;
    use PHPMailer\PHPMailer\OAuth;
    // Alias the League Google OAuth2 provider class
    use League\OAuth2\Client\Provider\Google;
    //SMTP needs accurate times, and the PHP time zone MUST be set
    //This should be done in your php.ini, but this is how to do it if you don't have access to that
    date_default_timezone_set('Etc/UTC');
    //Load dependencies from composer
    //If this causes an error, run 'composer install'
    require 'vendor/autoload.php';

    $send_to_address = $_GET['email'];
    $send_to_name = $_GET['name'];


    //Create a new PHPMailer instance
    $mail = new PHPMailer;
    //Tell PHPMailer to use SMTP
    $mail->isSMTP();
    //Enable SMTP debugging
    // 0 = off (for production use)
    // 1 = client messages
    // 2 = client and server messages
    $mail->SMTPDebug = 2;
    //Set the hostname of the mail server
    $mail->Host = 'smtp.gmail.com';
    //Set the SMTP port number - 587 for authenticated TLS, a.k.a. RFC4409 SMTP submission
    $mail->Port = 587;
    //Set the encryption system to use - ssl (deprecated) or tls
    $mail->SMTPSecure = 'tls';
    //Whether to use SMTP authentication
    $mail->SMTPAuth = true;
    //Set AuthType to use XOAUTH2
    $mail->AuthType = 'XOAUTH2';
    //Fill in authentication details here
    //Either the gmail account owner, or the user that gave consent
    $email = 'gts@goodway.in';
    $clientId = '315061611767-fitjjndpsi6uo1j7hn923loaa0dg1ch1.apps.googleusercontent.com';
    $clientSecret = '3m-47D5Ojvpnfqp5qxxQ2WLn';
    //Obtained by configuring and running get_oauth_token.php
    //after setting up an app in Google Developer Console.
    $refreshToken = '4/qgEr9g7oYr2jk-q2YZpDbD5GCKK0oMdUHrVwsww9t5tXey5zr4fcjhS4Mk25rLcklEkUl4F20iKKmy-CAMme5r8';
    //Create a new OAuth2 provider instance
    $provider = new Google(
        [
            'clientId' => $clientId,
            'clientSecret' => $clientSecret,
        ]
    );
    //Pass the OAuth provider instance to PHPMailer
    $mail->setOAuth(
        new OAuth(
            [
                'provider' => $provider,
                'clientId' => $clientId,
                'clientSecret' => $clientSecret,
                'refreshToken' => $refreshToken,
                'userName' => $email,
            ]
        )
    );
    //Set who the message is to be sent from
    //For gmail, this generally needs to be the same as the user you logged in as
    $mail->setFrom($email, 'Gudbiz');
    //Set who the message is to be sent to
    $mail->addAddress($send_to_address, $send_to_name);
    //Set the subject line
    $mail->Subject = 'PHPMailer GMail XOAUTH2 SMTP test';
    //Read an HTML message body from an external file, convert referenced images to embedded,
    //convert HTML into a basic plain-text alternative body
    $mail->CharSet = 'utf-8';
    //$mail->msgHTML(file_get_contents('contentsutf8.html'), __DIR__);
    $mail->Body    = 'This is the HTML message body <b>in bold!</b>';
    //Replace the plain text body with one created manually
    $mail->AltBody = 'This is a plain-text message body';
    //Attach an image file
    //$mail->addAttachment('images/phpmailer_mini.png');
    //send the message, check for errors
    if (!$mail->send()) {
        echo "Mailer Error: " . $mail->ErrorInfo;
    } else {
        echo "Message sent!";
    }

使用上面的代码，我得到如下输出：

    2019-09-04 11:52:57 SERVER -> CLIENT: 220 smtp.gmail.com ESMTP v8sm7946021pje.6 - gsmtp
    2019-09-04 11:52:57 CLIENT -> SERVER: EHLO testapi.howorkforce.com
    2019-09-04 11:52:58 SERVER -> CLIENT: 250-smtp.gmail.com at your service, [13.126.85.98]250-SIZE 35882577250-8BITMIME250-STARTTLS250-ENHANCEDSTATUSCODES250-PIPELINING250-CHUNKING250 SMTPUTF8
    2019-09-04 11:52:58 CLIENT -> SERVER: STARTTLS
    2019-09-04 11:52:58 SERVER -> CLIENT: 220 2.0.0 Ready to start TLS
    2019-09-04 11:52:58 CLIENT -> SERVER: EHLO testapi.howorkforce.com
    2019-09-04 11:52:58 SERVER -> CLIENT: 250-smtp.gmail.com at your service, [13.126.85.98]250-SIZE 35882577250-8BITMIME250-AUTH LOGIN PLAIN XOAUTH2 PLAIN-CLIENTTOKEN OAUTHBEARER XOAUTH250-ENHANCEDSTATUSCODES250-PIPELINING250-CHUNKING250 SMTPUTF8

但是邮件没有发送。请为此提出解决方案。

请使用“SMTP 调试 4”查找附加信息

    2019-09-05 11:51:05 Connection: opening to smtp.gmail.com:587, timeout=300, options=array()
    2019-09-05 11:51:05 Connection: opened
    2019-09-05 11:51:05 SMTP INBOUND: "220 smtp.gmail.com ESMTP l23sm2317472pjy.3 - gsmtp"
    2019-09-05 11:51:05 SERVER -> CLIENT: 220 smtp.gmail.com ESMTP l23sm2317472pjy.3 - gsmtp
    2019-09-05 11:51:05 CLIENT -> SERVER: EHLO localhost
    2019-09-05 11:51:06 SMTP INBOUND: "250-smtp.gmail.com at your service, [103.125.155.132]"
    2019-09-05 11:51:06 SMTP INBOUND: "250-SIZE 35882577"
    2019-09-05 11:51:06 SMTP INBOUND: "250-8BITMIME"
    2019-09-05 11:51:06 SMTP INBOUND: "250-STARTTLS"
    2019-09-05 11:51:06 SMTP INBOUND: "250-ENHANCEDSTATUSCODES"
    2019-09-05 11:51:06 SMTP INBOUND: "250-PIPELINING"
    2019-09-05 11:51:06 SMTP INBOUND: "250-CHUNKING"
    2019-09-05 11:51:06 SMTP INBOUND: "250 SMTPUTF8"
    2019-09-05 11:51:06 SERVER -> CLIENT: 250-smtp.gmail.com at your service, [103.125.155.132]250-SIZE 35882577250-8BITMIME250-STARTTLS250-ENHANCEDSTATUSCODES250-PIPELINING250-CHUNKING250 SMTPUTF8
    2019-09-05 11:51:06 CLIENT -> SERVER: STARTTLS
    2019-09-05 11:51:06 SMTP INBOUND: "220 2.0.0 Ready to start TLS"
    2019-09-05 11:51:06 SERVER -> CLIENT: 220 2.0.0 Ready to start TLS
    2019-09-05 11:51:06 CLIENT -> SERVER: EHLO localhost
    2019-09-05 11:51:06 SMTP INBOUND: "250-smtp.gmail.com at your service, [103.125.155.132]"
    2019-09-05 11:51:06 SMTP INBOUND: "250-SIZE 35882577"
    2019-09-05 11:51:06 SMTP INBOUND: "250-8BITMIME"
    2019-09-05 11:51:06 SMTP INBOUND: "250-AUTH LOGIN PLAIN XOAUTH2 PLAIN-CLIENTTOKEN OAUTHBEARER XOAUTH"
    2019-09-05 11:51:06 SMTP INBOUND: "250-ENHANCEDSTATUSCODES"
    2019-09-05 11:51:06 SMTP INBOUND: "250-PIPELINING"
    2019-09-05 11:51:06 SMTP INBOUND: "250-CHUNKING"
    2019-09-05 11:51:06 SMTP INBOUND: "250 SMTPUTF8"
    2019-09-05 11:51:06 SERVER -> CLIENT: 250-smtp.gmail.com at your service, [103.125.155.132]250-SIZE 35882577250-8BITMIME250-AUTH LOGIN PLAIN XOAUTH2 PLAIN-CLIENTTOKEN OAUTHBEARER XOAUTH250-ENHANCEDSTATUSCODES250-PIPELINING250-CHUNKING250 SMTPUTF8
    2019-09-05 11:51:06 Auth method requested: XOAUTH2
    2019-09-05 11:51:06 Auth methods available on the server: LOGIN,PLAIN,XOAUTH2,PLAIN-CLIENTTOKEN,OAUTHBEARER,XOAUTH

Answer 1

我得到了解决方案。我使用的刷新令牌就是那个，这让我非常头疼。

我使用的“刷新令牌”无效。一旦我重新生成刷新令牌，一切似乎都很好。邮件发送正确。

Answer 2

如果您要避免这些事情，剩下的唯一选择是使用 PHPMailer 支持的 XOAUTH2 身份验证。配置起来既困难又复杂，并且可能会发生变化，所以与其在此处粘贴代码变得过时，我将向您推荐源代码。将您的代码基于the gmail OAuth example provided with PHPMailer，并使用the PHPMailer gmail xoauth2 guide in the project wiki 对其进行配置并获取凭据。