Hacker News Reader

It's OAuth. The application can launch a normal browser for the OAuth flow and have the user complete it.

For plenty of applications the whole purpose is not to run "a normal browser" and possibly not even have it installed.

You can also use a browser on a different device if your thing can't run a browser itself. OAuth covers a large space of options.

They can spit out a url for you to copy into a normal browser, then.