&gt; This is perhaps a general question about 3rd-party auth, but how am I supposed to trust an app like this when I click &quot;log in with google&#x2F;github&#x2F;etc&quot;? I&#x27;m simply shown a new pane within the same application that could easily be a phishing attack. There&#x27;s no way to verify who the hell I&#x27;m sending my user&#x2F;pass to.<p>I see this happening over and over again on my phone. Especially with Facebook logins.