Hi, I'd like to have a discussion around security and authentication flows occurring with the system browser vs a webview. I get the potential security risk but I don't think we have any guidance on how an IdP is supposed to ensure whether requests are coming from the system browser vs a webview. Thanks, George