Hacker News Reader

This just looks like an OAuth flow, which is rather standard.

It's not a good example to use of someone stealing an API.

Being in the authentication/authorization space for a while, this couldn't be truer. If OAuth 2.0 was a compelling differentiator from your API standpoint, they are doing it wrong.

Reply on news.ycombinator.com