Comment by gwbas1c

This just looks like an OAuth flow, which is rather standard.

It's not a good example to use of someone stealing an API.