Expresiv application in Salesforce user login history

cleaning up our integration user, and found a large number of logins from a mysterious application named “Expresiv” with an AWS IP address.

a few posts on salesforce forums over the years, mostly very old

i had a hunch, that turned out to be correct, that in my case these came from old formassembly forms that were connected via basic auth (un / pwd / token) instead of the new (c 2014) oauth option.

so now i gotta track these down and update them bc basic auth is no bueno.