About 3 years ago I was working for an internal team at eBay to create an app for their end users. Their api uses OAuth for all public resources. Instead of goi

About 3 years ago I was working for an internal team at eBay to create an app for their end users. Their api uses OAuth for all public resources. Instead of going through the pain of getting access to private apis, we just built the app on top of the public apis. Being perceived as a normal eBay product though we didn't want end users going through the Oauth process so we just processed the flow in a hidden webview. It was the path of least resistance that still allowed us to look official.