I started building a client too but the fact that one needs to handle a user’s creds directly just felt off to me. Don’t understand how this is an accepted practice.