Okta interview question

What security issues do you see in the example web app?