Security

Signing in a VR headset the way your TV does

Typing a password on a Meta Quest means pecking at a floating keyboard, so Bannermarch signs headsets in like a TV does. The headset shows a code and you approve it at /pair on your phone. Here's how the pieces fit, why someone who reads the code can't use it, and the reverse flow I added because you can't see your phone with a headset on.