OAuth allows both native apps and web apps to log in the same way. They probably both use the OAuth "authorization code" flow + refresh tokens. Super long expiry cookies are bad because they also last long if stolen. I recommend the Udemy course on OAuth by @aaronpk
WeChat ID
aaronpk_tv