Ditching Gmail OAuth for App Passwords: A Safer Email Authentication Approach

I'm building RecruiterReach, a tool that helps job own The "correct" way to send email on a user's behalf is the Gmail API with the gmail.send OAuth scope. I built it, it worked, and then I hit the wall: gmail.send is a restricted scope. To use it in production beyond ~100 App verification (fine) A