Don't all Google products support application specific passwords? Without built-in support for two-factor auth, it's cumbersome since you have to generate a password on your own, but anything with a password box works.
That's the way 2-step auth works. If you have 2-step auth enabled, and the application supports 2-step it will prompt for your username, normal password, and a one-time token. If the application doesn't support 2-step you have to generate an application specific password (which is a random string). The application specific passwords are only for clients that don't support 2-step (like IMAP and XMPP clients).
We've been using Gitblit (http://gitblit.com/) in the office for new projects and are quite happy with it. It all comes together when you hook up Groovy push scripts which we use to notify our Jenkins instance to test and build which in turn pushes it to our dev server for deploy.
http://jacobbijani.com/post/63757715317/me-and-tidas-desk-bu...