Created Email OAuth App Setup (markdown)

Email-OAuth-App-Setup.md

@@ -0,0 +1,31 @@
+### ⚠️ _Note: these instructions are user-maintained_
+
+In both cases you will need to specify your Paperless-ngx installation's Redirect URI as e.g. 'https://paperless.example.com/api/oauth/callback/'
+
+### Gmail
+
+1. Login to the Google Cloud Console and create a Project.
+
+2. In the Cloud Console, navigate to the “APIs & Services” > “Library” section and enable Gmail API
+
+3. In the Cloud Console, navigate to the “APIs & Services” > “OAuth Consent Screen” section and create a screen. Make no changes to the "Scopes" page.
+
+4. Under "Credentials" create a new "OAuth client ID", choose a web application and set the authorized javascript origins and redirect URI
+
+5. Obtain Client ID and Client Secret
+
+### Outlook
+
+See https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app and https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-configure-app-access-web-apis
+
+1. Login to the Azure portal, open the App registrations page, and click New registration.
+
+2. Choose the account type (single tenant vs multi-tenant).
+
+3. Set redirect URI.
+
+4. Navigate to the Authentication tab. Set "Implicit grant and hybrid flows" to allow both access and id tokens,
+
+5. Navigate to the Certificates & Secrets tab and add a new secret and note this **value** (not ID).
+
+8. Finally, on the "Overview" tab obtain the "Application (client) ID"