[cben]

Nice tip, thanks. But in this case it's wrapped in a destop app runtime distinct from my browser (Electron?), so there is no way to be already logged into Github/Google.

In an ideal world auth flows would always open in my system browser that I can trust. On both mobile and desktop.

(Well, technically I already installed a proprietary .deb and am running the process as my user, so game over.)