Korgalore Office 365 redux

Korgalore Office 365 redux

[Mario Limonciello]

I've been trying to get my I/T to enable it.  Because of the
unverified status they decided to make a dedicated tenant and
dedicated client ID for me to use to experiment until we have it
working.
After a lot of back and forth they have the redirect URL for the app
corresponding to it set up on their side as http://localhost.

This gets me much further than before, I actually get a
Authentication Successful
You can close this window and return to korgalore.

But then when I go back to korgalore on the terminal I'm left with a
sad message:

  File "/home/supermario/.local/share/pipx/venvs/korgalore/lib/python3.14/site-packages/requests/models.py",
line 1026, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 401 Client Error: Unauthorized for url:
https://login.microsoftonline.com/<tenant>/oauth2/v2.0/token

Obviously I swapped out the tenant for <tenant> above.

Any thoughts here what could be wrong?  I'm using KGL in WSL and
copy/pasting the auth URL into a browser outside WSL.

Re: Korgalore Office 365 redux

[Konstantin Ryabitsev]

On Fri, Feb 06, 2026 at 11:41:57AM -0600, Mario Limonciello wrote:
> But then when I go back to korgalore on the terminal I'm left with a
> sad message:
> 
>   File "/home/supermario/.local/share/pipx/venvs/korgalore/lib/python3.14/site-packages/requests/models.py",
> line 1026, in raise_for_status
>     raise HTTPError(http_error_msg, response=self)
> requests.exceptions.HTTPError: 401 Client Error: Unauthorized for url:
> https://login.microsoftonline.com/<tenant>/oauth2/v2.0/token
> 
> Obviously I swapped out the tenant for <tenant> above.
> 
> Any thoughts here what could be wrong?  I'm using KGL in WSL and
> copy/pasting the auth URL into a browser outside WSL.

Man, I don't envy your work environment. :)

My guess from some poking at it would be that maybe their application is
configured as "Web" only instead of "Mobile and Desktop"? Docs say to try the
following:

    - Go to App registrations -> Authentication -> "Advanced settings"
    - Set "Allow public client flows" to Yes
    - Ensure the platform is "Mobile and desktop applications", not "Web"

Also, check that IMAP.AccessAsUser.All permissions are granted, but this would
throw a different error, probably.

Hopefully, just a bit more prodding is required to get it to work!

-- 
KR