macOS prompts to log in to Google accounts on every wake

Question

I have several Google accounts set up in System Preferences > Internet Accounts on macOS 10.14.5. The Google accounts have two-factor authentication. I'm able to log in the accounts via a Safari window, and then use them with Mail and Calendar without problems.

Until my Mac sleeps. On wake, it demands that I log the accounts in again, requiring several rounds of password and two-factor authentication.

I have tried using Google's app-specific passwords, but they aren't accepted at the login prompt that pops up from System Preferences > Internet Accounts.

Is there a method to keep macOS logged in indefinitely?

Note: This does not appear to have the same cause as Can't login with Google using Internet Accounts — the answers there did not solve the problem for me.

Answer 1

I solved this problem by deleting my Google accounts in System Prefrences and replacing them with generic IMAP mail and CalDAV calendar accounts using Google's generated app passwords. These do not expire except when I ask them to on Google's site.

Answer 2

If, like me, you have that problem, you might want to check that googleapis.com and other google domains aren't blocked by a firewall (if you are using little snitch, double check that accountsd can access google apis.

Once I allowed accountsd outgoing internet access to googleapis.com, as shown in the attached screenshot, the mac no longer complained when woken up from sleep that I needed to enter my password for my GSuite account.

If that doesn't work, you can maybe look for a DNS server or a host file that would block the googleapis aswell.