https://blog.sanghviharshit.com/reverse-engineering-private-api-oauth-code-flow-with-pkce/