When you spend that extra time looking at JS code related to the app's auth flow and see this 🤦‍♂️