mastodon/app/controllers/api/v1/apps
..
credentials_controller.rb