'Can I Use Oauth2.0 to Access Gmail Inbox WIthout Needing 2FA and App Password?

If my web app has under 100 users, am I able to use Gmail's API to access a user's gmail inbox and perform certain functions - without the user needing to copy an app password and enable 2 FA? My web app currently has under 100 users and uses oauth2.0 to access a user's gmail inbox but it requires the user to copy an app password and enable 2FA. I'm trying to avoid these extra steps if possible.

I was under the impression that as long as my app has under 100 users, I could access a gmail inbox without the need for an app password and 2FA enabled. Once the app gets over 100 users, then a security audit is needed if we still want to bypass an app password and 2 FA enablement. Is this true?

Any help would be greatly appreciated!



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source