Glad you asked! So here is a teaser on how it works: 1. ClapChat gives you a unique id, the extension posts the id in your profile, ClapChat independently verifies that your profile contains the correct ID so that we know you really do own the account, then we double check the ID vs the session that we gave the id to and we can validate the authorization.

I'm working on a blog post that goes into much further detail and will post soon.