I just added my google account to gnome-online-account, assuming it'd use OAuth. I should mention I use two factor authentication.
I wrote in my google password + my verification key (but chose not to save it). After rebooting and reconnecting it said my account needed verification. I clicked the icon, clicked no "grant access", and got up my google login page, with the password apperantly already written in. I could click next and write in my verification code.
Is my password stored anywhere, or is authentication with a token still giving me a login page with the password apperantly written in when it needs to verify my account?