Google account sign-in is not secure, as implemented

[peter (Peter Hall)]

I am trying to sign up to Postman with my Google account. However, the Google sign-in page loads within the Postman application, so I cannot be sure that it is the real Google page. No one should log in this way because it is insecure and presents a risk of a man-in-the-middle attack.

Please provide an alternative that launches the Google sign-in in a normal browser window. This will be secure because a user can see the URL, in the browser that they trust.

Thanks,
Peter

[mr.gocet (goce t)]

Yes i have also noticed that just now when loggin in Postman with google account. I mean my creds are saved in the browser and i usually dont have to enter them again to login into third party services. Though i was asked to enter password and sms code when logging to Postman.
Cheers