There is something in the release notes about a new redirection-based TBA authorization flow (answer id: 87395). I would guess that it's a three-legged OAuth 1.0 flow, though, as the SuiteAnswer article mentiona setting the

oauth_version

to 1.0 when using it.