Isn't that just how oauth is done when a local app wants to be notified after login?