https://cattowerbestcheapprice.blogspot.com/2024/02/oauth-popup-cross-domain-security.html