[homakov]

FB is only showcase

for example Single sign on and OAuth2 redirect you to path?code=.. and it's also guessable