The phone knows what app to open based on protocol.
For the link "has://auth_req/..."
The "has" part is the protocol name. Applications during installation can define in the system which protocol they can handle.