Sure, if that's what it did, but that's not what it looks like it does. (no auth flow and they're on totally different domains)