In general, yes, you should proxy it. However, in this particular case, this may not even work - Google seems to have deployed additional countermeasures to block login through the proxy. (If you proxy the request, you can see the password of users, read their email, etc.)
If you only need to read your own email address, you have an alternative: https: // USERNAME: PASSWORD@gmail.google.com / gmail / feed / atom will give you the RSS feed of the latest emails. It also has an x-frame-options: SAMEORIGIN , but you can proxy it through node.
source share