J_Adam12

Is it a specific one or all calls?

But in practice, what does it matter. If they have access to the mail and the link in it, then they are the person they say they are, no ? So why wouldn’t they be allowed to go to other pages?

You can just create a script to run it. And if its os, nobody really expects support, so thats a benefit to you. Also i wouldnt want to give my credentials to a non established app.

What happens if there is a leak and your tool didn’t see it? Are you liable?

Yes, very helpful!