For that matter, a few times I've accepted auth tokens from external systems for logins and then create my own token for use in my apps as a bridge...