A common flow for OAuth2 in a React Native application is for the user to click a “Sign in with X” button, which then redirects them to the third-party service’s login page. Once the user ...

The technique is known as device code phishing. It exploits “device code flow,” a form of authentication formalized in the industry-wide OAuth standard.