Asking API creds on the OAuth callback

good day!
could you please advice on whether we can ask for the API creds after the OAuth flow completed? will this violate the publishing requirements?
the thing is we’re using 3rd-party service, which provides api creds to the user, so that user could access their api with our integration
sample flow:
1. ordinaty OAuth
2. callback to /api-auth (it’s a simple form with 2 fields: api key and api secret)
3. user fills it in, we store a pair or the portalId + api creds and use it to authenticate user to the 3rd-party API on our server

Hi, @AT9 Welcome to our community! Thanks for your question. Let’s invite some of our community members to the conversation – hey @zach_threadint @Bryantworks @himanshurauthan have you built anything similar in your integration work?

Thank you very much for taking a look! —Jaycee

@zach_threadint @Bryantworks @himanshurauthan :folded_hands: