Mitt Mail: Google review environment

This is an isolated, functional web review build of the Gmail integration. It is separate from the publicly distributed desktop and Android applications. It makes real Gmail REST API calls on the connected Google account.

1. Open the review application and sign in with the application username and password provided privately in the verification email. No app-level 2FA is required.
2. Click Tengjast Google / Gmail. Select an authorized Google test account with an active Gmail mailbox. Expand every permission on the Google consent screen so its details are readable.
3. The requested strings are openid https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/gmail.modify. This review build does not request https://mail.google.com/.
4. Open a message in Innhólf / Inbox. Use Merkja lesið / ólesið to change its read status, Setja stjörnu to star it, Safn / Archive to archive, and Eyða í rusl to move it to Trash. Open Rusl / Trash and use Endurheimta to restore it to Inbox.
5. Create a label using Nýtt merki / Label, open a message and select the label below the message. Confirm the changes in Gmail in another tab.
6. Click Nýr póstur, enter a test recipient, subject and body, and optionally choose attachments (up to 8 MB combined). Save using Vista drög á Gmail. Verify the draft in Gmail, then open Drög / Drafts in the review app, open the draft and choose Breyta Gmail-drögum to edit and save again. Existing drafts containing attachments can be read here but should be edited in Gmail to preserve the original attachments.
7. Send a new test email using Senda / Send and confirm the recipient receives it and Gmail Sent contains it. This review build sends a new message; a separately saved draft is retained.
8. Use Aftengja Google to remove tokens from this browser session, or Útskrá / Sign out to clear the application session.

Limits and data handling

No permanent deletion of received messages is implemented. Messages are displayed as text; HTML scripts and remote images are not executed. Unlike the desktop application, the review server processes Gmail API responses and stores encrypted Google access/refresh tokens in private server-side sessions. It does not persist message bodies or attachments in an application mailbox database. See the review privacy notice.

The review environment must be configured with a separate Google staging project using these exact scopes. Existing approved production scopes and production publishing status are retained during the downscoping process.