This is the simplest way to obtain a token from a user that is not you.
You need a website to collect tokens.