Out-of-band (QR code) authentication: a standalone Unity game shows a QR code, the player scans it with the Pi Browser app, approves the login with Pi Sign-in (OAuth 2.0 implicit flow), and the game polls until the session is approved.
/api/auth/create-session — called by Unity to create a QR login session/qr-login?token=... — opened in the Pi Browser after scanning the QR code/qr-login/callback — OAuth redirect target; approves the session/api/auth/poll?token=... — polled by Unity until the session is approved/api/player?piUid=... — loads the signed-in player's game dataSee README.md for setup: Neon schema, Pi Developer Portal configuration, and the Unity client (unity/PiLoginManager.cs).