The current method of using OAuth introduced in /docs/api/oauth requires developers to redirect users to https://mixin.one/oauth/authorize first to get authenticated. Which in some cases doesn’t fit the scenario. Here I introduce a way to authorize the user without leaving the current page and without exposing client_secret.