Its a normal sign in flow. A safe way just in case is to log in to Google normally, close that tab, open the posted link then click the links in the oauth flow without entering credentials.
Again, seems sketchy. Even if not actually sketchy (I'm obviously unwilling to try).