I’m sure there’s a way to have an extension that doesn’t need the user to go through the normal authentication flow, as I’ve seen extensions that immediately recognize that the user is authenticated, and it proceeds to make private api calls.

But are there examples that demonstrate this?

I saw a bunch of extension source codes, but they’ve been intentionally obfuscated and too long for me to reverse engineer.