It's the handler that responds to the "Continue" form post on this screen. Instead of a Boolean, the client sent back the actual email address and the server accepted arbitrary values.
If I'm reading it right it's not the token endpoint, it's their internal API for accepting the request that let the user choose which email to share with the app. So it's a form validation problem.
Hi. First, we're hope you're safe. We have reporters around the city tonight, but we also want to include photos and videos from around the community to ensure we're providing complete coverage. Did you take this video, and can we use it on TV and digital/social media?
It's so bad, especially on my 12" Macbook. Like sure it's 3 years old, but it' still got an i7 processor and a website dedicated to serving text in 280-character chunks should *not* be this slow on it.