diff --git a/pkgs/development/python-modules/google_auth/default.nix b/pkgs/development/python-modules/google_auth/default.nix
new file mode 100644
index 00000000000..04dfd26a0e8
--- /dev/null
+++ b/pkgs/development/python-modules/google_auth/default.nix
@@ -0,0 +1,31 @@
+{ stdenv, buildPythonPackage, fetchPypi
+, pytest, mock, oauth2client, flask, requests, urllib3, pytest-localserver, six, pyasn1-modules, cachetools, rsa }:
+
+buildPythonPackage rec {
+  pname = "google-auth";
+  version = "1.2.1";
+
+  src = fetchPypi {
+    inherit pname version;
+    sha256 = "041qpwlvpawggasvbfpkx39mkg4dgvivj831x7kinidayrf46w3i";
+  };
+
+  checkInputs = [ pytest mock oauth2client flask requests urllib3 pytest-localserver ];
+  propagatedBuildInputs = [ six pyasn1-modules cachetools rsa ];
+
+  # The removed test tests the working together of google_auth and google's https://pypi.python.org/pypi/oauth2client
+  # but the latter is deprecated. Since it is not currently part of the nixpkgs collection and deprecated it will
+  # probably never be. We just remove the test to make the tests work again.
+  postPatch = ''rm tests/test__oauth2client.py'';
+
+  checkPhase = ''
+    py.test
+  '';
+
+  meta = with stdenv.lib; {
+    description = "This library simplifies using Google’s various server-to-server authentication mechanisms to access Google APIs.";
+    homepage = "https://google-auth.readthedocs.io/en/latest/";
+    license = licenses.asl20;
+    maintainers = with maintainers; [ vanschelven ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index b7db812ea3d..712ded83a86 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -9095,6 +9095,8 @@ in {
     };
   };
 
+  google_auth = callPackage ../development/python-modules/google_auth { };
+
   grammalecte = callPackage ../development/python-modules/grammalecte { };
 
   greenlet = buildPythonPackage rec {