See also https://bugs.freedesktop.org/show_bug.cgi?id=37376

Does X-GOOGLE-PLATFORM exists? I see only X-OAUTH2 in the XMPP auth mechanisms.

GOA does not give a OAUTH2 access-token though, see bug #661065.

Not really, afaik GTalk only supports oauth2; the idea X-GOOGLE-PLATFORM of is implementing the underlying oauth2 in Gabble/Wocky rather than in each client; see https://bugs.freedesktop.org/show_bug.cgi?id=37376

This is still relevant for 3.3.92, I just got the password dialog on a newly created Google account. I propose to raise the importance of this issue, as having it would add quite some polish to the overall chat experience.

I totally agree with you but except if GTalk starts supporting oauth1, the only way to fix this bug is to get an oauth2 token from GOA which has been rejected: bug #661065

*** Bug 677864 has been marked as a duplicate of this bug. ***

We actually implement this now with UOA. It would be trivial to support GOA as well but as long as it doesn't give us the oauth2 token there is no much we can do. Closing this bug as bug #661065 as been marked as WONTFIX by GOA developers.

(In reply to comment #7)
> We actually implement this now with UOA. It would be trivial to support GOA as
> well but as long as it doesn't give us the oauth2 token there is no much we can
> do. Closing this bug as bug #661065 as been marked as WONTFIX by GOA
> developers.

WONTFIX is a bit of an oversimplification. :-)

We couldn't do OAuth2 for Google because we rely on OAuth1 for GMail IMAP as stated here: https://bugzilla.gnome.org/show_bug.cgi?id=661065#c1

Now, reading Google's documentation it seems that it might be possible to do GMail IMAP over OAuth2, but the documentation does not say it clearly either. Atleast I could not find it. So the only way to find out is to write the code and try if it works.

*** Bug 683766 has been marked as a duplicate of this bug. ***

Created attachment 227455 [details] [review]
Implement Google OAUTH2 authentication for GOA accounts

GOA recently switched to OAuth2 for Google accounts, so we
can use its credentials to access Google Talk without a password.

Review of attachment 227455 [details] [review]:

Looks good, thanks!

::: libempathy/empathy-goa-auth-handler.c
@@ +187,3 @@
+            goa_account_get_identity (goa_object_peek_account (data->goa_object)),
+            access_token,
+            auth_cb, data);

This one can stay on the same line as 'acces_token'.

Attachment 227455 [details] pushed as 0bd9b3a - Implement Google OAUTH2 authentication for GOA accounts

YAAYYYYYY!

*** Bug 647007 has been marked as a duplicate of this bug. ***

GAuth 2FA is supported, but does not address the per-app access token.

Might be related to a larger auth issue.
I've filed a bug: Bug 738995