I’m happy to announce that MarsEdit 3.7 is available now from the MarsEdit home page and will be submitted to the Mac App Store approval for approval by Apple. If you are an existing Mac App Store customer, you can download and use the direct-download version immediately. Just switch back to the App Store version after you notice it’s been approved.
One week ago today, MarsEdit compatibility with Blogger was broken by a change in Google’s authentication requirements. I’ve spent the past week adding the required changes to MarsEdit so that Blogger blogs can be authenticated with the most modern mechanism Google offers: their company-wide OAuth2 implementation.
The big change for Blogger users is that instead of the usual MarsEdit authentication panel, requesting your Google username and password, you will see a larger window pop up with web content served directly from Google:
While updating MarsEdit to use the new system was not a trivial undertaking, it is a valuable change for the long term. The new authentication scheme offers two significant improvements to protect your Google account’s security:
- Your password will no longer be stored (or even handled) by MarsEdit. The Google web window authenticates you using your login information, and then shares with MarsEdit a unique authentication token, which is now stored securely in the OS X keychain. This token allows MarsEdit to connect to your Blogger account without prompting you again for permission.
- You retain the option to revoke that access at any time, without even opening MarsEdit. Although MarsEdit always stores passwords securely in the OS X keychain, this additional level of security ensures that even if somebody were able to gain access to your keychain contents, they would not obtain unfettered access to your entire Google account.
This has been a wild week, but I’m very relieved to be able to offer this update for Google Blogger users. Folks who don’t use Blogger should also update, because there are a few minor fixes that will, in particular, improve the experience of using the MarsEdit Media Manager for some workflows.
Complete list of changes in MarsEdit 3.7:
- Restore functionality for Google’s Blogger blogs by supporting their modern authentication scheme
- Fix handling of dates to ensure proper post scheduling in all locales/regions
- Fix some visual flickering of the Media Manager’s album/folders lists while clicking them
- Refinements to Apple Photos support in Media Browser
- Prevent a crash that could occur in media manager when no Photos library was created yet
- Fix a problem where some groups could be expanded even if there are no contents inside
Please let me know ASAP, either in the comments below or by other support channels, how the update is working out for you.