Ah, it handle by nsecbunker, you can learn more about it here: https://github.com/kind-0/nsecbunkerd/blob/master/OAUTH-LIKE-FLOW.md and https://github.com/kind-0/nsecbunkerd/blob/master/SECURITY-MODEL.md