Maybe they open an iframe, but in this case, you will need to do your auth configuration manually: [Showcase] Manual OAuth2 Token Integration
The code request is not made by api request, but it’s done by going to the authorize URL (authentication page). The first API request made is to exchange the code for access token. This is done by calling the token endpoint.
And Bubble will complete by doing another API call to fetch user data.