Out-of-band authentication: a standalone Unity game opens a login page in the PC browser, Pi's authorize page renders a QR code the player scans with the Pi app's wallet scanner, approves the login with Pi Sign-in (OAuth 2.0 implicit flow), and the game polls until the session is approved.
/api/auth/create-session — called by Unity to create a QR login session/qr-login?token=... — opened in the PC browser; approves the session/qr-login/callback — OAuth redirect target; approves the session/api/auth/poll?token=... — polled by Unity until the session is approved/api/player?piUid=... — loads the signed-in player's game dataSee README.md for setup: Neon schema, Pi Developer Portal configuration, and the Unity client (unity/PiLoginManager.cs).