- It opens a browser with the challenge in a state parameter. - The user authorizes on GitHub. - GitHub redirects to a local callback with a code. - The CLI exchanges the code and verifier for tokens.

BraceJSON is a privacy-first JSON workbench that runs entirely in your browser. Nothing leaves the page, and that's not a pinky-promise, it's enforced by the browser itself (a Content-Security-Policy ...